# Invalid response from https://domain.org/.well-known/acme-challenge/ 404

**URL:** <https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356>\
**Category:** Help\
**Created:** [February 27, 2025, 9:42pm UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356 "2025-02-27T21:42:02Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Snoopy](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@Snoopy](https://community.letsencrypt.org/u/Snoopy)\
**Post date:** [February 27, 2025, 9:42pm UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356/1 "2025-02-27T21:42:02Z")

</div>

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org)

I ran this command:  
sudo certbot -v certonly --manual --dry-run -d [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org)  
with the option U (Update)

or sudo certbot -v renew --dry-run

It produced this output:  
Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Plugins selected: Authenticator manual, Installer None

* * *

An RSA certificate named [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org) already exists. Do you  
want to update its key type to ECDSA?

* * *

(U)pdate key type/(K)eep existing key type: U  
Simulating renewal of an existing certificate for [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org)  
Performing the following challenges:  
http-01 challenge for [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org)

* * *

Create a file containing just this data:

JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE.HJoMTHfT3thyKrz2wzIjhgo3KT6Qrb3ur3IL1dHlT2c

And make it available on your web server at this URL:

[http://meteomaingournois.dyndns.org/.well-known/acme-challenge/JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE](http://meteomaingournois.dyndns.org/.well-known/acme-challenge/JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE)

* * *

Press Enter to Continue  
Waiting for verification...  
Challenge failed for domain [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org)  
http-01 challenge for [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org)

Certbot failed to authenticate some domains (authenticator: manual). The Certificate Authority reported these problems:  
Domain: [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org)  
Type: unauthorized  
Detail: 82.66.9.83: Invalid response from [https://meteomaingournois.dyndns.org/.well-known/acme-challenge/JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE:](https://meteomaingournois.dyndns.org/.well-known/acme-challenge/JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE:) 404

Hint: The Certificate Authority failed to verify the manually created challenge files. Ensure that you created these in the correct location.

Cleaning up challenges  
Some challenges have failed.  
Ask for help or search for solutions at [https://community.letsencrypt.org](https://community.letsencrypt.org). See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

My web server is (include version):  
Apache 2.4.62

The operating system my web server runs on is (include version):  
MAC OS X 15.3 (Sequoia)

My hosting provider, if applicable, is: NA

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): certbot 3.2.0

My configuration vhost

```nohighlight
<VirtualHost *:80>
    ServerAdmin meteo.maingournois@gmail.com
    ServerName meteomaingournois.dyndns.org
    ServerAlias *meteomaingournois.dyndns.org
    DocumentRoot "/Cerbot"
    Alias /.well-known/acme-challenge/ /etc/letsencrypt/.well-known/acme-challenge/
    <Directory "/etc/letsencrypt/.well-known/acme-challenge/">
        Options None
        AllowOverride None
        ForceType text/plain
        RedirectMatch 404 "^(?!/\.well-known/acme-challenge/[\w-]{43}$)"
    </Directory>
    ErrorLog "/Cerbot/logs/error_cerbot.log"
    CustomLog "/Cerbot/logs/access_cerbot.log" combined
    RewriteEngine on
    RewriteCond %{SERVER_NAME} =*meteomaingournois.dyndns.org [OR]
    RewriteCond %{SERVER_NAME} =meteomaingournois.dyndns.org
    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

```

sudo apachectl -t -D DUMP\_VHOSTS  
VirtualHost configuration:  
\*:80 [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org) (/private/etc/apache2/extra/httpd-vhosts.conf:29)  
\*:443 [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org) (/private/etc/apache2/extra/httpd-ssl.conf:125)

And finally, when i put a file foo.txt or foo in the folder .well-known/acme-challenge/, i can view the contain file with the adress  
[https://meteomaingournois.dyndns.org/.well-known/acme-challenge/foo.txt](https://meteomaingournois.dyndns.org/.well-known/acme-challenge/foo.txt) or  
[https://meteomaingournois.dyndns.org/.well-known/acme-challenge/foo](https://meteomaingournois.dyndns.org/.well-known/acme-challenge/foo)

Thank you by advance for your help

---

<div class="post-metadata">

**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\
**Post date:** [February 28, 2025, 3:04am UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356/2 "2025-02-28T03:04:58Z")

</div>

> [@Snoopy](#):
>
> Create a file containing just this data:
> 
> JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE.HJoMTHfT3thyKrz2wzIjhgo3KT6Qrb3ur3IL1dHlT2c
> 
> And make it available on your web server at this URL:
> 
> [http://meteomaingournois.dyndns.org/.well-known/acme-challenge/JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE](http://meteomaingournois.dyndns.org/.well-known/acme-challenge/JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE)

Hello @Snoopy, did you do that?  
You can check with a web browser.

The manual option makes remote checking harder.

Let's Debug's results [https://letsdebug.net/meteomaingournois.dyndns.org/2378367](https://letsdebug.net/meteomaingournois.dyndns.org/2378367)

 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/2/4/247f0251907c0eb1f93994ab8cc39e8bcd1ec469.png)

And I see this on Chrome for the ACME HTTP-01 Challenge, after the redirect to HTTPS.

 ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/7/0/708b6697043c59cd2f48875b71ddf515f99cd0d0.png)

Also Certbot manual info [User Guide — Certbot 5.2.1 documentation](https://eff-certbot.readthedocs.io/en/stable/using.html#manual)

### Edit

> **curl -i http://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile**
>
> $ curl -i [http://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile](http://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile) -A "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"  
> HTTP/1.1 301 Moved Permanently  
> Date: Fri, 28 Feb 2025 03:08:47 GMT  
> Server: Apache  
> Location: [https://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile](https://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile)  
> Content-Length: 284  
> Content-Type: text/html; charset=iso-8859-1
> 
> 301 Moved Permanently
> # Moved Permanently
> 
> The document has moved [here](https://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile).

> **And following the redirection to https://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile**
>
> $ curl -k -i [https://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile](https://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile) -A "Mozilla/5.0 (compatible; Let's Encrypt validation server; +https://www.letsencrypt.org)"  
> HTTP/1.1 404 Not Found  
> Date: Fri, 28 Feb 2025 03:09:02 GMT  
> Server: Apache  
> Last-Modified: Sun, 07 Jun 2020 15:15:04 GMT  
> ETag: "3163-5a77ff5700e00"  
> Accept-Ranges: bytes  
> Content-Length: 12643  
> Content-Type: text/html
> 
> Maingournois weather (France) 
> 
> # weather Maintenon (Maingournois) - 28 - France
> 
> ## &nbsp;Latitude&nbsp;48.6 N&nbsp;&nbsp;&nbsp;&nbsp;Longitude&nbsp;1.6 E&nbsp;&nbsp;&nbsp;&nbsp;Elevation&nbsp;105 m
> 
> ## \>\>This pages requires JavaScript enabling in your browser.\<\< \>\>Please enable scripting it to enjoy this site at its best.\<\<
> 
> - maintenant
> - [aujourd'hui](https://community.letsencrypt.org/today.html)
> - [&nbsp;hier&nbsp;](https://community.letsencrypt.org/yesterday.html)
> - [dernier&nbsp;mois](https://community.letsencrypt.org/lastmonth.html)
> - [dernières&nbsp;années](https://community.letsencrypt.org/lastyears.html)
> - [records](https://community.letsencrypt.org/records.html)
> - [observations](https://community.letsencrypt.org/observations.html)
> - [prévisions](https://community.letsencrypt.org/previsions.html)
> - [alertes](https://vigilance.meteofrance.fr/fr)
> - [archives](https://community.letsencrypt.org/archives.html)
> - [infos](https://community.letsencrypt.org/infos.html)
> - [contact](https://community.letsencrypt.org/contact.php)
> 
> &nbsp;&nbsp;&nbsp; &nbsp;&nbsp; 
> 
> | ![](https://sea3.discourse-cdn.com/letsencrypt/images/temps/day-fc-icon-partlycloudy.png) | Soleil: | | ![](https://sea3.discourse-cdn.com/letsencrypt/images/moon/lunar_phase_27.jpg) |
> | Lune: | |
> | |
> 
> Outside Inside 
> 
> Dew Point Apparent   
> Wind Chill Heat Index   
> Humidex 
> 
> Outside Inside 
> 
> Temperature: 
> 
> °C 
> 
> °F 
> 
> Rainfall: 
> 
> mm 
> 
> Inch 
> 
> Pressure: 
> 
> hPa 
> 
> inHg 
> 
> mb 
> 
> kPa 
> 
> Wind Speed: 
> 
> km/h 
> 
> m/s 
> 
> mph 
> 
> knots 
> 
> CloudBase: 
> 
> m 
> 
> ft 
> 
> * * *
> Scripts: Mark Crossley - version   
> Gauges: Gerrit Grunwald's [SteelSeries](https://harmoniccode.blogspot.com) [JavaScript library](https://github.com/HanSolo/SteelSeries-Canvas)  
> Wind Rose: [RGraph](https://www.rgraph.net/)  
> A cookie is used to store your UoM and gauge preferences  
> powered by  
> 
>   
> 
> ![](https://sea3.discourse-cdn.com/letsencrypt/images/navigation/attention.jpg) Les données présentes sur ce site sont issues d’une station météorologique amateur et sont données à titre indicatif. Elles ne peuvent donc en aucun cas servir pour la sécurité des biens et des personnes. 
> 
> ##### Ce site est compatible avec iPhone, Internet Explorer à partir de IE 9, Firefox, Chrome et Safari.

---

<div class="post-metadata">

**Author:** ![Snoopy](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@Snoopy](https://community.letsencrypt.org/u/Snoopy)\
**Post date:** [February 28, 2025, 5:21am UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356/3 "2025-02-28T05:21:53Z")

</div>

Hi,

Thanks for your response.  
In the htttps port, i have a other website (meteo station)  
OK, i check that this evening.  
Here, it's the morning.

---

<div class="post-metadata">

**Author:** ![Snoopy](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@Snoopy](https://community.letsencrypt.org/u/Snoopy)\
**Post date:** [February 28, 2025, 8:01pm UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356/4 "2025-02-28T20:01:44Z")

</div>

Hi

OK. I see the problem.  
I have create the file and when I check with a web browser, i go to my web station site.  
I serch the solution

Best regards

---

<div class="post-metadata">

**Author:** ![Snoopy](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@Snoopy](https://community.letsencrypt.org/u/Snoopy)\
**Post date:** [February 28, 2025, 8:56pm UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356/6 "2025-02-28T20:56:15Z")

</div>

Re

It's so strange  
The 2 files are in the /.well-known/acme-challenge/  
If you test this URL [https://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile](https://meteomaingournois.dyndns.org/.well-known/acme-challenge/sometestfile), you can see the containt  
If you test this [https://meteomaingournois.dyndns.org/.well-known/acme-challenge/JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE](https://meteomaingournois.dyndns.org/.well-known/acme-challenge/JpbtJqV3kMGvX4mOsXAWpgM6LkxwVDmRKopqngukYTE), you have an error 404 (in my site, error 404 return to the base of the site)

---

<div class="post-metadata">

**Author:** ![Snoopy](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@Snoopy](https://community.letsencrypt.org/u/Snoopy)\
**Post date:** [February 28, 2025, 9:14pm UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356/7 "2025-02-28T21:14:44Z")

</div>

I suppose cerbot can't create file in the .well-known/acme-challenge

---

<div class="post-metadata">

**Author:** ![Snoopy](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@Snoopy](https://community.letsencrypt.org/u/Snoopy)\
**Post date:** [February 28, 2025, 10:21pm UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356/8 "2025-02-28T22:21:17Z")

</div>

I found the solution  
I use this command  
sudo certbot -v certonly -d [meteomaingournois.dyndns.org](http://meteomaingournois.dyndns.org) witht the option 3 and the webroot

Thanks for your help

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [March 30, 2025, 10:22pm UTC](https://community.letsencrypt.org/t/invalid-response-from-https-domain-org-well-known-acme-challenge-404/234356/9 "2025-03-30T22:22:14Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
