I am trying to renew my ssl certificate & get this error

Could not issue an SSL/TLS certificate for labcreator.in

Could not issue a Let's Encrypt SSL/TLS certificate for labcreator.in . Authorization for the domain failed.


Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/12942804138.


Type: urn:ietf:params:acme:error:dns

Status: 400

Detail: During secondary validation: DNS problem: query timed out looking up A for labcreator.in

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: labcreator.in

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: plesk

I can login to a root shell on my machine (yes or no, or I don't know):no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

Hi @Ndhamne

During secondary validation

is the key. That tells you: The primary Letsencrypt servers can check your DNS. Some of the secondary can't.

Looks like you block some (AWS-) ip addresses.

Your configuration is fatal - see your check, created yesterday - https://check-your-website.server-daten.de/?q=labcreator.in

•  ns1.webtechmediaadvertising.com
Mumbai/Maharashtra/India (IN) - Web Werks India Pvt. Ltd.	•

	•  ns2.webtechmediaadvertising.com
Mumbai/Maharashtra/India (IN) - Web Werks India Pvt. Ltd.

Both name servers with the same ip address.

That's not the idea of "different name servers".

And it's the same ip address of your domain


I don't know how to fix this issue please give me some instructions

You have created that buggy system, so you have to find a solution how to fix that.

Name server configuration isn't part of this forum.

Why do you run your own name server if you don't know such things? I use the name server of a dns provider instead of running my own.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.