I am trying to renew my ssl certificate & get this error

Help
1

Could not issue an SSL/TLS certificate for labcreator.in
Details

Could not issue a Let's Encrypt SSL/TLS certificate for labcreator.in . Authorization for the domain failed.

Details

Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/12942804138.

Details:

Type: urn:ietf:params:acme:error:dns

Status: 400

Detail: During secondary validation: DNS problem: query timed out looking up A for labcreator.in

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: labcreator.in

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: plesk

I can login to a root shell on my machine (yes or no, or I don't know):no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

2

Hi @Ndhamne

During secondary validation

is the key. That tells you: The primary Letsencrypt servers can check your DNS. Some of the secondary can't.

Looks like you block some (AWS-) ip addresses.

Your configuration is fatal - see your check, created yesterday - labcreator.in - Make your website better - DNS, redirects, mixed content, certificates

•  ns1.webtechmediaadvertising.com
	103.233.25.188
Mumbai/Maharashtra/India (IN) - Web Werks India Pvt. Ltd.	•

	•  ns2.webtechmediaadvertising.com
	103.233.25.188
Mumbai/Maharashtra/India (IN) - Web Werks India Pvt. Ltd.

Both name servers with the same ip address.

That's not the idea of "different name servers".

And it's the same ip address of your domain

labcreator.in
	A
	103.233.25.188
3

I don't know how to fix this issue please give me some instructions

4

You have created that buggy system, so you have to find a solution how to fix that.

Name server configuration isn't part of this forum.

Why do you run your own name server if you don't know such things? I use the name server of a dns provider instead of running my own.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.