# I am trying to renew my ssl certificate & get this error

**URL:** https://community.letsencrypt.org/t/i-am-trying-to-renew-my-ssl-certificate-get-this-error/151313
**Category:** Help
**Created:** [May 8, 2021, 4:49am UTC](https://community.letsencrypt.org/t/i-am-trying-to-renew-my-ssl-certificate-get-this-error/151313 "2021-05-08T04:49:07Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Ndhamne](https://avatars.discourse-cdn.com/v4/letter/n/dec6dc/32.png) [@Ndhamne](https://community.letsencrypt.org/u/Ndhamne)
#### Post date: [May 8, 2021, 4:49am UTC](https://community.letsencrypt.org/t/i-am-trying-to-renew-my-ssl-certificate-get-this-error/151313/1 "2021-05-08T04:49:07Z")

</div>

Could not issue an SSL/TLS certificate for **labcreator.in**  
Details

Could not issue a Let's Encrypt SSL/TLS certificate for **labcreator.in**. Authorization for the domain failed.

Details

Invalid response from [https://acme-v02.api.letsencrypt.org/acme/authz-v3/12942804138](https://acme-v02.api.letsencrypt.org/acme/authz-v3/12942804138).

Details:

Type: urn:ietf:params:acme:error:dns

Status: 400

Detail: During secondary validation: DNS problem: query timed out looking up A for labcreator.in

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: labcreator.in

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is: plesk

I can login to a root shell on my machine (yes or no, or I don't know):no

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot):

---

<div class="post-metadata">

### Author: ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)
#### Post date: [May 8, 2021, 8:35am UTC](https://community.letsencrypt.org/t/i-am-trying-to-renew-my-ssl-certificate-get-this-error/151313/2 "2021-05-08T08:35:59Z")

</div>

Hi @Ndhamne

> [@Ndhamne](#):
>
> Detail: During secondary validation: DNS problem: query timed out looking up A for labcreator.in

> During secondary validation

is the key. That tells you: The primary Letsencrypt servers can check your DNS. Some of the secondary can't.

Looks like you block some (AWS-) ip addresses.

Your configuration is fatal - see your check, created yesterday - [labcreator.in - Make your website better - DNS, redirects, mixed content, certificates](https://check-your-website.server-daten.de/?q=labcreator.in)

```nohighlight
• ns1.webtechmediaadvertising.com
	103.233.25.188
Mumbai/Maharashtra/India (IN) - Web Werks India Pvt. Ltd.	•

	• ns2.webtechmediaadvertising.com
	103.233.25.188
Mumbai/Maharashtra/India (IN) - Web Werks India Pvt. Ltd.

```

Both name servers with the same ip address.

That's not the idea of "different name servers".

And it's the same ip address of your domain

```nohighlight
labcreator.in
	A
	103.233.25.188

```

---

<div class="post-metadata">

### Author: ![Ndhamne](https://avatars.discourse-cdn.com/v4/letter/n/dec6dc/32.png) [@Ndhamne](https://community.letsencrypt.org/u/Ndhamne)
#### Post date: [May 8, 2021, 9:08am UTC](https://community.letsencrypt.org/t/i-am-trying-to-renew-my-ssl-certificate-get-this-error/151313/3 "2021-05-08T09:08:23Z")

</div>

I don't know how to fix this issue please give me some instructions

---

<div class="post-metadata">

### Author: ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)
#### Post date: [May 8, 2021, 10:11am UTC](https://community.letsencrypt.org/t/i-am-trying-to-renew-my-ssl-certificate-get-this-error/151313/4 "2021-05-08T10:11:34Z")

</div>

> [@Ndhamne](#):
>
> please give me some instructions

You have created that buggy system, so you have to find a solution how to fix that.

Name server configuration isn't part of this forum.

Why do you run your own name server if you don't know such things? I use the name server of a dns provider instead of running my own.

---

<div class="post-metadata">

### Author: ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)
#### Post date: [June 7, 2021, 10:11am UTC](https://community.letsencrypt.org/t/i-am-trying-to-renew-my-ssl-certificate-get-this-error/151313/5 "2021-06-07T10:11:59Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
