# I need Help, cant renew certificate!

**URL:** <https://community.letsencrypt.org/t/i-need-help-cant-renew-certificate/80970>\
**Category:** Help\
**Created:** [December 26, 2018, 7:12pm UTC](https://community.letsencrypt.org/t/i-need-help-cant-renew-certificate/80970 "2018-12-26T19:12:49Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![mnordhoff](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mnordhoff/32/22583_2.png) [@mnordhoff](https://community.letsencrypt.org/u/mnordhoff)\
**Post date:** [December 26, 2018, 10:51pm UTC](https://community.letsencrypt.org/t/i-need-help-cant-renew-certificate/80970/5 "2018-12-26T22:51:29Z")

</div>

I'm concerned. None of `ma.gov.br`'s nameservers support TCP, but their `DNSKEY` record set is close to 1.2 KB.

Let's Encrypt is unable to resolve -- let alone issue certificates for -- anything under `ma.gov.br`.

Let's Encrypt made the EDNS buffer size change on 2018-11-15, and haven't issued a certificate for the zone since 2018-11-14.

[https://crt.sh/?Identity=%25.ma.gov.br&iCAID=16418](https://crt.sh/?Identity=%25.ma.gov.br&iCAID=16418)

> [@EDNS Buffer Size Changing to 512 Bytes (In 2024: now 1232)](https://community.letsencrypt.org/t/edns-buffer-size-changing-to-512-bytes/77945):
>
> S…

---

_[View the full topic](https://community.letsencrypt.org/t/i-need-help-cant-renew-certificate/80970)._