Installing SSL using CertSage on Namecheap

[Brio]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:motorbikerentalphuket.com

I ran this command:Using CertSage, Aquire Staging Certificate

It produced this output:urn:ietf:params:acme:error:unauthorized
162.0.209.129: Invalid response from Phuket Travel and Tour Information "\n\n\t\n\t

My web server is (include version):Server Name premium174

The operating system my web server runs on is (include version):Apache Version 2.4.58

My hosting provider, if applicable, is:Namecheap

I can login to a root shell on my machine (yes or no, or I don't know):Yes I think

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): 110.0 (build 12)

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):N.A.

I managed to install SSL to the parent site, phukettravelandtours.com but got the error trying to Aquire a Staging Cert for sub domain motorbikerentalphuket.com, I uploaded the file certsage.txt and renamed to PHP in the folder public_html/motorbikerentalphuket

I have not received formal website training, so I bustle through on instincts and trial and error. I'm a geezer too, so some terminology is doing my head in.

So my question is, where should I upload the certsage.txt file for subdomains for Certpage to find it and create a Staging Certificate?

[orangepizza]

somewhat feels like Index of /.well-known/acme-challenge/ handled by different thing: does your webserver dir have Index of /.well-known/pki-validation/ directory?

[Brio]

No records found on CP File manager if thats what you meant.

[orangepizza]

than something else handle that paths: you need to find where it is
because there is still old validateion file when it got sectigo certificate last year:

and anyway it renewed itself: did you do that?

[Brio]

I didn't do it, I migrated to namecheap last year and SSL was not done. Namecheap help sorted it a year ago, but thats all expiring as I understand it. Thats why I am here in Letsencrypt.

[orangepizza]

the webserver got a fresh certificate an hour ago and using it now: think something else manages certificate for you?

crt.sh | a6511b35675f96869dbc467e310571b674180c56e8b203c65a50f82912a17690

[Brio]

Sorry, yes I did that site with Certsage an hour ago. The site motorbikerentalphuket.com is the one I am trying to solve. It is a subdomain of phukettravelandtours. I hope i am making sense and using the correct terminology.

[orangepizza]

I expect some agent namecheap side catches .well-known subdir and handle (litespeed handles it) acme/pki renewal: I kinda expect it'd run few hours later or next day:

[Brio]

I have not tried to do the motorbikerentalphuket site, only the staging which fails.

The parent site phukettravelandtours went through on CertSage successfully. Its the bike site thats not happening at the staging step

[orangepizza]

could you search filename E86EFBF9ADF596F0A6BAD603530957B9.txt in server and reply where it is?

[Brio]

@orangepizza

E86EFBF9ADF596F0A6BAD603530957B9.txt

/public_html/bikes/.well-known/pki-validation/E86EFBF9ADF596F0A6BAD603530957B9.txt

[Brio]

After lots of reading and experimenting, the problem was solved so far by using www.example2.com/certsage.php rather than example2.com/certsage.php, so managed to open the Certsage page, generate the thingys, and install Certs....I hope.

Thanks orangepizza for your input.

[griffin]

Welcome to the Let's Encrypt Community, Brian!

Author of CertSage here. Glad you got your certs working. Looks like you got the idea. If you have any further questions, we're here to help.

Shoutout to @orangepizza for the assistance!

[Brio]

Thanks @griffin

What threw me the most was the Password File. That was a head scratcher. Once that was found, then uploading certsage.php to every site and discovering the second password file in my file tree, it became clear.

This is really a hobby, so its great to find somewhere that has genuine without condescending attitudes . All the sites are showing up on SSL checker as good to go.

I hope the renewal in 90 days works smoothly. I may well be back in the forums at the end of May.

Regards

[griffin]

The renewal process with CertSage is exactly the same as the initial process, so if it worked now it will work then. I recommend changing the contents of each password file to whatever password you want, for convenience.