# Invalid response use certbot in ubuntu

**URL:** <https://community.letsencrypt.org/t/invalid-response-use-certbot-in-ubuntu/72818>\
**Category:** Help\
**Created:** [September 21, 2018, 10:44am UTC](https://community.letsencrypt.org/t/invalid-response-use-certbot-in-ubuntu/72818 "2018-09-21T10:44:27Z")\
**Posts on this page:** 1\
**Showing post:** 17

<div class="post-metadata">

**Author:** ![weixw](https://avatars.discourse-cdn.com/v4/letter/w/439d5e/32.png) [@weixw](https://community.letsencrypt.org/u/weixw)\
**Post date:** [September 23, 2018, 9:13am UTC](https://community.letsencrypt.org/t/invalid-response-use-certbot-in-ubuntu/72818/17 "2018-09-23T09:13:51Z")

</div>

Thanks.  
Now using the DNS-01 method, the following error occurs again:

zenops@hwsafe03:~$ sudo .acme.sh/acme.sh --issue --dns dns\_cx -d zen02.newnet.cf --debug  
[Sun Sep 23 17:03:17 CST 2018] Lets find script dir.  
[Sun Sep 23 17:03:17 CST 2018] _SCRIPT_=’.acme.sh/acme.sh’  
[Sun Sep 23 17:03:17 CST 2018] \_script=’/home/zenops/.acme.sh/acme.sh’  
[Sun Sep 23 17:03:17 CST 2018] \_script\_home=’/home/zenops/.acme.sh’  
[Sun Sep 23 17:03:17 CST 2018] Using default home:/home/zenops/.acme.sh  
[Sun Sep 23 17:03:17 CST 2018] Using config home:/home/zenops/.acme.sh

> **[Neilpang/acme.sh](https://github.com/Neilpang/acme.sh)**
>
> A pure Unix shell script implementing ACME client protocol - Neilpang/acme.sh

  
v2.8.0  
[Sun Sep 23 17:03:17 CST 2018] \_main\_domain=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:17 CST 2018] \_alt\_domains=‘no’  
[Sun Sep 23 17:03:17 CST 2018] Using config home:/home/zenops/.acme.sh  
[Sun Sep 23 17:03:17 CST 2018] ACME\_DIRECTORY=‘[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)’  
[Sun Sep 23 17:03:17 CST 2018] DOMAIN\_PATH=’/home/zenops/.acme.sh/zen02.newnet.cf’  
[Sun Sep 23 17:03:17 CST 2018] Using ACME\_DIRECTORY: [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)  
[Sun Sep 23 17:03:17 CST 2018] \_init api for server: [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)  
[Sun Sep 23 17:03:17 CST 2018] GET  
[Sun Sep 23 17:03:17 CST 2018] url=‘[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)’  
[Sun Sep 23 17:03:17 CST 2018] timeout=  
[Sun Sep 23 17:03:17 CST 2018] \_CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’  
[Sun Sep 23 17:03:18 CST 2018] ret=‘0’  
[Sun Sep 23 17:03:18 CST 2018] ACME\_KEY\_CHANGE=‘[https://acme-v01.api.letsencrypt.org/acme/key-change](https://acme-v01.api.letsencrypt.org/acme/key-change)’  
[Sun Sep 23 17:03:18 CST 2018] ACME\_NEW\_AUTHZ=‘[https://acme-v01.api.letsencrypt.org/acme/new-authz](https://acme-v01.api.letsencrypt.org/acme/new-authz)’  
[Sun Sep 23 17:03:18 CST 2018] ACME\_NEW\_ORDER=‘[https://acme-v01.api.letsencrypt.org/acme/new-cert](https://acme-v01.api.letsencrypt.org/acme/new-cert)’  
[Sun Sep 23 17:03:18 CST 2018] ACME\_NEW\_ACCOUNT=‘[https://acme-v01.api.letsencrypt.org/acme/new-reg](https://acme-v01.api.letsencrypt.org/acme/new-reg)’  
[Sun Sep 23 17:03:18 CST 2018] ACME\_REVOKE\_CERT=‘[https://acme-v01.api.letsencrypt.org/acme/revoke-cert](https://acme-v01.api.letsencrypt.org/acme/revoke-cert)’  
[Sun Sep 23 17:03:18 CST 2018] ACME\_AGREEMENT=‘[https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf](https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf)’  
[Sun Sep 23 17:03:18 CST 2018] ACME\_NEW\_NONCE  
[Sun Sep 23 17:03:18 CST 2018] ACME\_VERSION  
[Sun Sep 23 17:03:18 CST 2018] \_on\_before\_issue  
[Sun Sep 23 17:03:18 CST 2018] \_chk\_main\_domain=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:18 CST 2018] \_chk\_alt\_domains  
[Sun Sep 23 17:03:18 CST 2018] Le\_LocalAddress  
[Sun Sep 23 17:03:18 CST 2018] d=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:18 CST 2018] Check for domain=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:18 CST 2018] \_currentRoot=‘dns\_cx’  
[Sun Sep 23 17:03:18 CST 2018] d  
[Sun Sep 23 17:03:18 CST 2018] config file is empty, can not read CA\_KEY\_HASH  
[Sun Sep 23 17:03:18 CST 2018] Using config home:/home/zenops/.acme.sh  
[Sun Sep 23 17:03:18 CST 2018] ACME\_DIRECTORY=‘[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)’  
[Sun Sep 23 17:03:18 CST 2018] \_init api for server: [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)  
[Sun Sep 23 17:03:18 CST 2018] Use default length 2048  
[Sun Sep 23 17:03:18 CST 2018] length=‘2048’  
[Sun Sep 23 17:03:18 CST 2018] Using config home:/home/zenops/.acme.sh  
[Sun Sep 23 17:03:18 CST 2018] ACME\_DIRECTORY=‘[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)’  
[Sun Sep 23 17:03:18 CST 2018] Use length 2048  
[Sun Sep 23 17:03:18 CST 2018] Using RSA: 2048  
[Sun Sep 23 17:03:19 CST 2018] RSA key  
[Sun Sep 23 17:03:19 CST 2018] Registering account  
[Sun Sep 23 17:03:19 CST 2018] url=‘[https://acme-v01.api.letsencrypt.org/acme/new-reg](https://acme-v01.api.letsencrypt.org/acme/new-reg)’  
[Sun Sep 23 17:03:19 CST 2018] payload=’{“resource”: “new-reg”, “terms-of-service-agreed”: true, “agreement”: “[https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf](https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf)”}’  
[Sun Sep 23 17:03:19 CST 2018] GET  
[Sun Sep 23 17:03:19 CST 2018] url=‘[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)’  
[Sun Sep 23 17:03:19 CST 2018] timeout=  
[Sun Sep 23 17:03:19 CST 2018] \_CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’  
[Sun Sep 23 17:03:19 CST 2018] ret=‘0’  
[Sun Sep 23 17:03:19 CST 2018] POST  
[Sun Sep 23 17:03:19 CST 2018] \_post\_url=‘[https://acme-v01.api.letsencrypt.org/acme/new-reg](https://acme-v01.api.letsencrypt.org/acme/new-reg)’  
[Sun Sep 23 17:03:19 CST 2018] \_CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’  
[Sun Sep 23 17:03:21 CST 2018] \_ret=‘0’  
[Sun Sep 23 17:03:21 CST 2018] code=‘201’  
[Sun Sep 23 17:03:21 CST 2018] Registered  
[Sun Sep 23 17:03:21 CST 2018] \_accUri=‘[https://acme-v01.api.letsencrypt.org/acme/reg/42608138](https://acme-v01.api.letsencrypt.org/acme/reg/42608138)’  
[Sun Sep 23 17:03:21 CST 2018] Calc CA\_KEY\_HASH=‘CTrTJLe4fri71yZuIbE4zNkzc8qc2nLBeszAjEYR0H4=’  
[Sun Sep 23 17:03:21 CST 2018] ACCOUNT\_THUMBPRINT=‘3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg’  
[Sun Sep 23 17:03:21 CST 2018] Read key length:  
[Sun Sep 23 17:03:21 CST 2018] Creating domain key  
[Sun Sep 23 17:03:21 CST 2018] Use DEFAULT\_DOMAIN\_KEY\_LENGTH=2048  
[Sun Sep 23 17:03:21 CST 2018] Using config home:/home/zenops/.acme.sh  
[Sun Sep 23 17:03:21 CST 2018] ACME\_DIRECTORY=‘[https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)’  
[Sun Sep 23 17:03:21 CST 2018] Use length 2048  
[Sun Sep 23 17:03:21 CST 2018] Using RSA: 2048  
[Sun Sep 23 17:03:21 CST 2018] The domain key is here: /home/zenops/.acme.sh/zen02.newnet.cf/zen02.newnet.cf.key  
[Sun Sep 23 17:03:21 CST 2018] \_createcsr  
[Sun Sep 23 17:03:21 CST 2018] Single domain=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:21 CST 2018] Getting domain auth token for each domain  
[Sun Sep 23 17:03:21 CST 2018] d=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:21 CST 2018] Getting webroot for domain=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:21 CST 2018] \_w=‘dns\_cx’  
[Sun Sep 23 17:03:21 CST 2018] \_currentRoot=‘dns\_cx’  
[Sun Sep 23 17:03:21 CST 2018] Getting new-authz for domain=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:21 CST 2018] \_init api for server: [https://acme-v01.api.letsencrypt.org/directory](https://acme-v01.api.letsencrypt.org/directory)  
[Sun Sep 23 17:03:21 CST 2018] Try new-authz for the 0 time.  
[Sun Sep 23 17:03:21 CST 2018] url=‘[https://acme-v01.api.letsencrypt.org/acme/new-authz](https://acme-v01.api.letsencrypt.org/acme/new-authz)’  
[Sun Sep 23 17:03:21 CST 2018] payload=’{“resource”: “new-authz”, “identifier”: {“type”: “dns”, “value”: “zen02.newnet.cf”}}’  
[Sun Sep 23 17:03:21 CST 2018] POST  
[Sun Sep 23 17:03:21 CST 2018] \_post\_url=‘[https://acme-v01.api.letsencrypt.org/acme/new-authz](https://acme-v01.api.letsencrypt.org/acme/new-authz)’  
[Sun Sep 23 17:03:21 CST 2018] \_CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’  
[Sun Sep 23 17:03:22 CST 2018] \_ret=‘0’  
[Sun Sep 23 17:03:22 CST 2018] code=‘201’  
[Sun Sep 23 17:03:22 CST 2018] The new-authz request is ok.  
[Sun Sep 23 17:03:22 CST 2018] entry=’“type”:“dns-01”,“status”:“pending”,“uri”:“[https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311",“token”:"NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo](https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311%22,%22token%22:%22NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo)”’  
[Sun Sep 23 17:03:22 CST 2018] token=‘NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo’  
[Sun Sep 23 17:03:22 CST 2018] uri=‘[https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311](https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311)’  
[Sun Sep 23 17:03:22 CST 2018] keyauthorization=‘NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo.3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg’  
[Sun Sep 23 17:03:22 CST 2018] dvlist=‘zen02.newnet.cf#NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo.3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg#[https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311#dns-01#dns\_cx](https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311#dns-01#dns_cx)’  
[Sun Sep 23 17:03:22 CST 2018] d  
[Sun Sep 23 17:03:22 CST 2018] vlist=‘zen02.newnet.cf#NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo.3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg#[https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311#dns-01#dns\_cx,’](https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311#dns-01#dns_cx,')  
[Sun Sep 23 17:03:22 CST 2018] d=‘zen02.newnet.cf’  
[Sun Sep 23 17:03:22 CST 2018] \_d\_alias  
[Sun Sep 23 17:03:22 CST 2018] txtdomain=’\_acme-challenge.zen02.newnet.cf’  
[Sun Sep 23 17:03:22 CST 2018] txt=‘OSSJ6IqI3PqjsestIpyIWApGySirKQQbOJIeQK-4jSw’  
[Sun Sep 23 17:03:22 CST 2018] d\_api=’/home/zenops/.acme.sh/dnsapi/dns\_cx.sh’  
[Sun Sep 23 17:03:22 CST 2018] Found domain api file: /home/zenops/.acme.sh/dnsapi/dns\_cx.sh  
[Sun Sep 23 17:03:22 CST 2018] First detect the root zone  
[Sun Sep 23 17:03:22 CST 2018] ep=‘domain’  
[Sun Sep 23 17:03:22 CST 2018] url=‘[https://www.cloudxns.net/api2/domain](https://www.cloudxns.net/api2/domain)’  
[Sun Sep 23 17:03:22 CST 2018] cdate=‘2018-09-23 09:03:22 UTC’  
[Sun Sep 23 17:03:22 CST 2018] data  
‘ttps://www.cloudxns.net/api2/domain2018-09-23 09:03:22 UTCaefa8233b182092f  
[Sun Sep 23 17:03:22 CST 2018] hmac=‘ed875caedbca31b2912fabddd7a853d0’  
[Sun Sep 23 17:03:22 CST 2018] GET  
[Sun Sep 23 17:03:22 CST 2018] url=‘[https://www.cloudxns.net/api2/domain](https://www.cloudxns.net/api2/domain)’  
[Sun Sep 23 17:03:22 CST 2018] timeout=  
[Sun Sep 23 17:03:23 CST 2018] \_CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’  
[Sun Sep 23 17:03:23 CST 2018] ret=‘0’  
[Sun Sep 23 17:03:23 CST 2018] invalid domain  
[Sun Sep 23 17:03:23 CST 2018] Error add txt for domain:\_acme-challenge.zen02.newnet.cf  
[Sun Sep 23 17:03:23 CST 2018] pid  
[Sun Sep 23 17:03:23 CST 2018] No need to restore nginx, skip.  
[Sun Sep 23 17:03:23 CST 2018] \_clearupdns  
[Sun Sep 23 17:03:23 CST 2018] skip dns.  
[Sun Sep 23 17:03:23 CST 2018] \_on\_issue\_err  
[Sun Sep 23 17:03:23 CST 2018] Please add ‘–debug’ or ‘–log’ to check more details.  
[Sun Sep 23 17:03:23 CST 2018] See: [https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh](https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh)  
[Sun Sep 23 17:03:23 CST 2018] url=‘[https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311](https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311)’  
[Sun Sep 23 17:03:23 CST 2018] payload=’{“resource”: “challenge”, “keyAuthorization”: “NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo.3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg”}’  
[Sun Sep 23 17:03:23 CST 2018] POST  
[Sun Sep 23 17:03:23 CST 2018] \_post\_url=‘[https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311](https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311)’  
[Sun Sep 23 17:03:23 CST 2018] \_CURL='curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’  
[Sun Sep 23 17:03:24 CST 2018] \_ret=‘0’  
[Sun Sep 23 17:03:24 CST 2018] code=‘202’  
[Sun Sep 23 17:03:24 CST 2018] Diagnosis versions:  
openssl:openssl  
OpenSSL 1.0.2g 1 Mar 2016  
apache:  
apache doesn’t exists.  
nginx:  
nginx doesn’t exists.  
socat:

---

_[View the full topic](https://community.letsencrypt.org/t/invalid-response-use-certbot-in-ubuntu/72818)._