I can't renew my certificates for domains that don't exist

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: altadomiciliar.com.br

I ran this command: sudo /usr/local/bin/certbot renew --cert-name altadomiciliar.com.br

It produced this output:


Processing /etc/letsencrypt/renewal/altadomiciliar.com.br.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for cdpininar.com.br
http-01 challenge for sergiofranconinar.com.br
http-01 challenge for www.cdpininar.com.br
http-01 challenge for www.sergiofranconinar.com.br
Waiting for verification…
Challenge failed for domain cdpininar.com.br
Challenge failed for domain sergiofranconinar.com.br
Challenge failed for domain www.cdpininar.com.br
Challenge failed for domain www.sergiofranconinar.com.br
http-01 challenge for cdpininar.com.br
http-01 challenge for sergiofranconinar.com.br
http-01 challenge for www.cdpininar.com.br
http-01 challenge for www.sergiofranconinar.com.br
Cleaning up challenges
Attempting to renew cert (altadomiciliar.com.br) from /etc/letsencrypt/renewal/altadomiciliar.com.br.conf produced an unexpected error: Some challenges have failed… Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/altadomiciliar.com.br/fullchain.pem (failure)


All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/altadomiciliar.com.br/fullchain.pem (failure)


1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: cdpininar.com.br
    Type: dns
    Detail: DNS problem: NXDOMAIN looking up A for cdpininar.com.br

    Domain: sergiofranconinar.com.br
    Type: dns
    Detail: DNS problem: NXDOMAIN looking up A for
    sergiofranconinar.com.br

    Domain: www.cdpininar.com.br
    Type: dns
    Detail: DNS problem: NXDOMAIN looking up A for www.cdpininar.com.br

    Domain: www.sergiofranconinar.com.br
    Type: dns
    Detail: DNS problem: NXDOMAIN looking up A for
    www.sergiofranconinar.com.br

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 1.0.0

1 Like

Hi @vcrm

checking that domain looks like that domain isn’t registered - https://check-your-website.server-daten.de/?q=cdpininar.com.br

No ip address:

Host T IP-Address is auth. ∑ Queries ∑ Timeout
cdpininar.com.br Name Error yes 1 0
www.cdpininar.com.br Name Error yes 1 0

Name server:

cdpininar.com.br
• a.dns.br

Only the standard name server of the com.br zone.

You can’t create a certificate with a domain name if you aren’t owner of that domain name.

–>> Create a new certificate without these not existing domain names.

Check

with the -d and the --cert-name option.

1 Like

Hi @JuergenAuer,
Yes, these domains are no longer registered, but when I do

certbot certificates

This certicate has a lot off domains:

Certificate Name: altadomiciliar.com.br
Domains: altacheckup.com.br altadomiciliar.com.br bronsteinsaude.com.br cdpininar.com.br cerpe50anos.com.br cerpeprime.com.br coracaodemaedelboni.com.br delboni60.com.br delbonidomiciliar.com.br examedomiciliar.com.br laboratorioexamesaude.com.br laminaclub60.com.br laminadomiciliar.com.br lavoisierdomiciliar.com.br lavoisiersaude.com.br paposaudedamulher.com.br sergiofranconinar.com.br sfcdpininar.com.br sooalvarotem.com.br szddomiciliar.com.br szdsaude.com.br www.altacheckup.com.br www.altadomiciliar.com.br www.bronsteinsaude.com.br www.cdpininar.com.br www.cerpe50anos.com.br www.cerpeprime.com.br www.coracaodemaedelboni.com.br www.delboni60.com.br www.delbonidomiciliar.com.br www.laboratorioexamesaude.com.br www.laminaclub60.com.br www.laminadomiciliar.com.br www.lavoisierdomiciliar.com.br www.lavoisiersaude.com.br www.paposaudedamulher.com.br www.sergiofranconinar.com.br www.sfcdpininar.com.br www.sooalvarotem.com.br www.szddomiciliar.com.br www.szdsaude.com.br

How do I remove these specific domains from my certificate?

1 Like

As written: Use the -d option with a list of correct certificates and the --certificate-name option to override the existing certificate (so it’s not longer renewed).

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.