# How to resolve the "Correct zName not found for TLS SNI challenge" error when i try renew certificate **URL:** \ **Category:** Help\ **Created:** [January 23, 2016, 8:46pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405 "2016-01-23T20:46:42Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![jesusangelm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jesusangelm/32/4534_2.png) [@jesusangelm](https://community.letsencrypt.org/u/jesusangelm)\ **Post date:** [January 23, 2016, 8:46pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/1 "2016-01-23T20:46:42Z")
i am trying renew my certificate that will expire tomorrow, but i get an error as: Failed authorization procedure. [foo.bar.net.ve](http://foo.bar.net.ve) (tls-sni-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Correct zName not found for TLS SNI challenge. Found ‘[foo.bar.net.ve](http://foo.bar.net.ve)’ ``` IMPORTANT NOTES: - The following errors were reported by the server: Domain: foo.bar.net.ve Type: urn:acme:error:unauthorized Detail: Correct zName not found for TLS SNI challenge. Found 'foo.bar.net.ve' ``` how i can fix this error and renew my certificate? 3 months ago this certificate was generated without error. thanks in advance ---
**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\ **Post date:** [January 23, 2016, 9:50pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/2 "2016-01-23T21:50:30Z")
Does the domain actually exist and corretly route to the right server ? ---
**Author:** ![jesusangelm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jesusangelm/32/4534_2.png) [@jesusangelm](https://community.letsencrypt.org/u/jesusangelm)\ **Post date:** [January 23, 2016, 11:24pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/3 "2016-01-23T23:24:47Z")
yes, the domain exist. what you mean with “the right server” ? i switch the vps in december, it has influence? ---
**Author:** ![oommd](https://avatars.discourse-cdn.com/v4/letter/o/8c91f0/32.png) [@oommd](https://community.letsencrypt.org/u/oommd)\ **Post date:** [January 24, 2016, 12:13am UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/4 "2016-01-24T00:13:53Z")
Just so happens that I am hitting this error also after moving domains to (3 ) new vps . These are mail servers and Im thinking it has something to do with them contacting the webservers for auth. …ound for TLS SNI challenge. Found ‘\*.webhostbox.net, [webhostbox.net](http://webhostbox.net)’ \<— I will look into this and let you know what I find. ---
**Author:** ![oommd](https://avatars.discourse-cdn.com/v4/letter/o/8c91f0/32.png) [@oommd](https://community.letsencrypt.org/u/oommd)\ **Post date:** [January 24, 2016, 12:49am UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/5 "2016-01-24T00:49:05Z")
Yep , My error was cleared when I removed -d [hostname.com](http://hostname.com) and left the ( actual ) -d [emailserver.hostname.com](http://emailserver.hostname.com) My email servers have nothing to so with there web host, therefore email contacts/certs/IP all would be wrong. ---
**Author:** ![jesusangelm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jesusangelm/32/4534_2.png) [@jesusangelm](https://community.letsencrypt.org/u/jesusangelm)\ **Post date:** [January 26, 2016, 12:22pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/6 "2016-01-26T12:22:19Z")
I solved this problem by returning to StartSSL. ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [January 26, 2016, 12:36pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/7 "2016-01-26T12:36:17Z")
Congrats, you just threw in the towel there 😞 ---
**Author:** ![jesusangelm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jesusangelm/32/4534_2.png) [@jesusangelm](https://community.letsencrypt.org/u/jesusangelm)\ **Post date:** [January 26, 2016, 4:22pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/8 "2016-01-26T16:22:21Z")
thanks but i not know what else to do. and while my web remains without ssl support, i needed migrate to another provider so temporarily. not sure if the migration of vps had something to do with the error (ip changes, etc), i not get responses in this question. i keep researching about ssl and my problem with renew. ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [January 26, 2016, 4:26pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/9 "2016-01-26T16:26:46Z")
Well, this specific question has been posted here quite a lot, so my guess is the search function would have given you quite a few threads, including an anwser 🙂 ---
**Author:** ![forand](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/forand/32/4795_2.png) [@forand](https://community.letsencrypt.org/u/forand)\ **Post date:** [February 1, 2016, 2:48am UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/10 "2016-02-01T02:48:06Z")
While a number of people have had similar issues none, that I could find have the same issue. In particular it found the zName but still failed. All the other posts I have seen say nothing was found. I am having the exact same issue. I have not found any solution after trying what I could find on both this forum and googling. ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [February 1, 2016, 5:24am UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/11 "2016-02-01T05:24:01Z")
Probably your HTTPS-server serves a certificate for another hostname than the one queried… But without the hostname we can’t verify that. ---
**Author:** ![jesusangelm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jesusangelm/32/4534_2.png) [@jesusangelm](https://community.letsencrypt.org/u/jesusangelm)\ **Post date:** [February 1, 2016, 12:46pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/12 "2016-02-01T12:46:38Z")
I’ve searched the forum as suggested Osiris, but I have not been successful. I try to create a self-signed certificate as suggested in other posts but this does not work for me. ---
**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\ **Post date:** [February 1, 2016, 1:00pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/13 "2016-02-01T13:00:18Z")
Are you happy to provide your domain name ( by private message if needbe) then we can potentially help more. ---
**Author:** ![jesusangelm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jesusangelm/32/4534_2.png) [@jesusangelm](https://community.letsencrypt.org/u/jesusangelm)\ **Post date:** [February 1, 2016, 1:49pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/14 "2016-02-01T13:49:07Z")
the domain name is [blog.jam.net.ve](http://blog.jam.net.ve) whitelisted domains are: [jam.net.ve](http://jam.net.ve) [blog.jam.net.ve](http://blog.jam.net.ve) ---
**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\ **Post date:** [February 1, 2016, 1:56pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/15 "2016-02-01T13:56:14Z")
Thanks. And, just to confirm, you are still getting the same error ( Correct zName not found) if you try on your domains with the current startssl certificates ? ---
**Author:** ![jesusangelm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jesusangelm/32/4534_2.png) [@jesusangelm](https://community.letsencrypt.org/u/jesusangelm)\ **Post date:** [February 1, 2016, 2:09pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/16 "2016-02-01T14:09:39Z")
yes, same error with the current startssl certificates, with the old letsencrypt certificates and with the self-signed certificates ---
**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\ **Post date:** [February 1, 2016, 2:21pm UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/17 "2016-02-01T14:21:09Z")
I suspect in your case it’s the IPv6 that could be causing the issue … I seem to remember that with someone before (unless my memory going) … looking … ---
**Author:** ![forand](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/forand/32/4795_2.png) [@forand](https://community.letsencrypt.org/u/forand)\ **Post date:** [February 2, 2016, 2:08am UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/18 "2016-02-02T02:08:59Z")
I messaged @serverco the domain but basically the error is the: Verify error:Correct zName not found for TLS SNI challenge. Found ‘[my.domain.name](http://my.domain.name)’ Where “[my.domain.name](http://my.domain.name)” is my domain. The SSL certificate has the correct subject and issuer. ---
**Author:** ![serverco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/serverco/32/4251_2.png) [@serverco](https://community.letsencrypt.org/u/serverco)\ **Post date:** [February 2, 2016, 6:55am UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/19 "2016-02-02T06:55:28Z")
Sorry, I’m away today - will try and catch up once back online … ---
**Author:** ![kelunik](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/kelunik/32/359_2.png) [@kelunik](https://community.letsencrypt.org/u/kelunik)\ **Post date:** [February 2, 2016, 10:16am UTC](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405/20 "2016-02-02T10:16:46Z")
How do you try to solve the challenge? Which client options do you use? I guess your server is serving the default certificate instead of the challenge certificate which must contain something like `abc.def.acme.invalid` as hostname. [Next page](https://community.letsencrypt.org/t/how-to-resolve-the-correct-zname-not-found-for-tls-sni-challenge-error-when-i-try-renew-certificate/9405.md?page=2)