Misunderstanding in replies of API

ip75 · April 25, 2021, 3:38am

I ran this command:
acme.sh --force --issue --keylength ec-521 -d bvginenglish.com -d "*.bvginenglish.com" --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
It produced this output:

[воскресенье, 25 апреля 2021 г. 06:21:32 (MSK)] Using CA: https://acme-v02.api.letsencrypt.org/directory
[воскресенье, 25 апреля 2021 г. 06:21:33 (MSK)] Multi domain='DNS:bvginenglish.com,DNS:*.bvginenglish.com'
[воскресенье, 25 апреля 2021 г. 06:21:33 (MSK)] Getting domain auth token for each domain
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Getting webroot for domain='bvginenglish.com'
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Getting webroot for domain='*.bvginenglish.com'
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Add the following TXT record:
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Domain: '_acme-challenge.bvginenglish.com'
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] TXT value: 'xcM-Q7-hmKMAM1DA_cmAuTDTnq92tcOw0qjs3qe4cX8'
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Please be aware that you prepend _acme-challenge. before your domain
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] so the resulting subdomain will be: _acme-challenge.bvginenglish.com
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Add the following TXT record:
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Domain: '_acme-challenge.bvginenglish.com'
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] TXT value: 'HhlYDtLr90c-z9Ey_dQpWBgA-v-pFg_NW8GEM1gY40o'
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Please be aware that you prepend _acme-challenge. before your domain
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] so the resulting subdomain will be: _acme-challenge.bvginenglish.com
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Please add the TXT records to the domains, and re-run with --renew.
[воскресенье, 25 апреля 2021 г. 06:21:36 (MSK)] Please check log file for more details: /root/.acme.sh/acme.sh.log

My web server is (include version):
nginx version: nginx/1.18.0

The operating system my web server runs on is (include version):
FreeBSD 12.2-RELEASE-p4 FreeBSD 12.2-RELEASE-p4 142f0d36d909(releng/12.2) BVGM amd64
My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):
yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
[root:] # acme.sh --version
GitHub - acmesh-official/acme.sh: A pure Unix shell script implementing ACME client protocol
v2.8.8

My question is ..... how can i add two different values to one TXT record in my domain DNS zone?

I got "Rate Limits" blocking when I tried to issue cert for my domain (goswami.ru) for this reason.
Please explain me my mistake and reset block for domain goswami.ru. My issued certificate for this domain will expire on 2 May. I also noticed that when I reset my _acme-challenge and wait for DNS update about half an hour and later I tried to renew certificate API returned me new value for _acme-challenge instead of check dns and renew certificate.

schoen · April 25, 2021, 4:28am

Hi @ip75,

According to DNS standards, you're allowed to create multiple DNS entries with the same name and type at the same time in the same zone. (This is slightly different from "two different values to one TXT record"—it's two different TXT records, with the same name and different values.)

How do you manage your DNS zone?

Unfortunately, there's no way to do that. (Let's Encrypt deliberately didn't create tools to reset the rate limit.) You can read about other options and workarounds in prior threads on this topic:

https://community.letsencrypt.org/search?q=%22too%20many%20certificates%20already%20issued%20for%22

https://community.letsencrypt.org/search?q=%22reset%20rate%20limit%22

One of the possible workarounds is that, if you succeed in issuing a new certificate covering both goswami.ru and *.goswami.ru, your existing duplicative certificates for just *.goswami.ru won't count as the "exact set of names" for purposes of calculating the duplicate certificate rate limit.

If you successfully complete an authorization for a domain with an ACME account, Let's Encrypt caches that authorization as successful for a period of time (I think 7 days) in connection with that account. In all other cases, and whether or not you issue one or more certificates using that authorization, you have to repeat the authorization from the beginning with a new challenge token. For example:

You have to repeat an authorization (with a new token) if the previous challenge validation for that authorization failed.
You have to repeat an authorization (with a new token) if you change ACME accounts, for example by destroying/reinstalling your server instance, or in most cases by switching ACME client software.
You have to repeat an authorization (with a new token) if the previous validation is too old (regardless of whether it is a certificate renewal or new issuance).

This is different from some other systems where a single DNS proof-of-control token is considered valid forever and only needs to be created once.

schoen · April 25, 2021, 4:35am

Here is a simpler recent explanation of this issue, and its consequences, in another thread:

ip75 · April 25, 2021, 5:06am

I edit my dns zone manually by vim.

I see. Thanks. That is my mistake. I thought it is possible only one record name available with one value. Sorry.

thank you very much for help.

And last question. How can I set "Subject" and "CN" field in issued certificate? These fields are set automatically when I use dns manual mode or dns api. When I tried to use acme.sh command line parameter --csr with my parameters in certificate request it's ignored.

schoen · April 25, 2021, 6:41am

I'm glad this information was useful for you.

Let's Encrypt doesn't allow you to set the Subject because details other than the domain names can't be verified automatically, so Let's Encrypt can't certify that they are correct. Other CAs may be able to verify other information offline somehow, but usually this is only available for a paid certificate, or an organization's internal CA.

The CN field is based on the first domain name requested in the certificate. It's possible that acme.sh always uses the alphabetically first name, so you might need to modify this or use other software if you want to request for a different name to come first in the certificate.

ip75 · April 25, 2021, 8:12am

I don't understand again. There are 2 TXT records in DNS zone as you see bellow but API says that they are absent. Please explain me what is wrong.

[root:]# drill _acme-challenge.bvginenglish.com @1.1.1.1 txt
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 59840
;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; _acme-challenge.bvginenglish.com.    IN      TXT

;; ANSWER SECTION:
_acme-challenge.bvginenglish.com.       1075    IN      TXT     "xcM-Q7-hmKMAM1DA_cmAuTDTnq92tcOw0qjs3qe4cX8"
_acme-challenge.bvginenglish.com.       1075    IN      TXT     "HhlYDtLr90c-z9Ey_dQpWBgA-v-pFg_NW8GEM1gY40o"

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 2 msec
;; SERVER: 1.1.1.1
;; WHEN: Sun Apr 25 11:10:57 2021
;; MSG SIZE  rcvd: 162
[root:]# acme.sh --issue --keylength ec-521 -d bvginenglish.com -d "*.bvginenglish.com" --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
[25 04 2021 г. 11:11:05 (MSK)] Using CA: https://acme-v02.api.letsencrypt.org/directory
[25 04 2021 г. 11:11:05 (MSK)] Multi domain='DNS:bvginenglish.com,DNS:*.bvginenglish.com'
[25 04 2021 г. 11:11:05 (MSK)] Getting domain auth token for each domain
[25 04 2021 г. 11:11:08 (MSK)] Getting webroot for domain='bvginenglish.com'
[25 04 2021 г. 11:11:08 (MSK)] Getting webroot for domain='*.bvginenglish.com'
[25 04 2021 г. 11:11:08 (MSK)] Add the following TXT record:
[25 04 2021 г. 11:11:08 (MSK)] Domain: '_acme-challenge.bvginenglish.com'
[25 04 2021 г. 11:11:08 (MSK)] TXT value: 'xcM-Q7-hmKMAM1DA_cmAuTDTnq92tcOw0qjs3qe4cX8'
[25 04 2021 г. 11:11:08 (MSK)] Please be aware that you prepend _acme-challenge. before your domain
[25 04 2021 г. 11:11:08 (MSK)] so the resulting subdomain will be: _acme-challenge.bvginenglish.com
[25 04 2021 г. 11:11:08 (MSK)] Add the following TXT record:
[25 04 2021 г. 11:11:08 (MSK)] Domain: '_acme-challenge.bvginenglish.com'
[25 04 2021 г. 11:11:08 (MSK)] TXT value: 'HhlYDtLr90c-z9Ey_dQpWBgA-v-pFg_NW8GEM1gY40o'
[25 04 2021 г. 11:11:08 (MSK)] Please be aware that you prepend _acme-challenge. before your domain
[25 04 2021 г. 11:11:08 (MSK)] so the resulting subdomain will be: _acme-challenge.bvginenglish.com
[25 04 2021 г. 11:11:08 (MSK)] Please add the TXT records to the domains, and re-run with --renew.
[25 04 2021 г. 11:11:08 (MSK)] Please check log file for more details: /root/.acme.sh/acme.sh.log
[root:]# acme.sh --renew --keylength ec-521 -d bvginenglish.com -d "*.bvginenglish.com" --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
[25 04 2021 г. 11:11:23 (MSK)] The domain 'bvginenglish.com' seems to have a ECC cert already, please add '--ecc' parameter if you want to use that cert.
[25 04 2021 г. 11:11:23 (MSK)] Renew: 'bvginenglish.com'
[25 04 2021 г. 11:11:23 (MSK)] 'bvginenglish.com' is not an issued domain, skip.

Osiris · April 25, 2021, 8:26am

Could be me, but I'm not seeing any error in the output you've pasted? Is there output missing?

Also, if you're experimenting (for example, with renewing), please use the staging environment. For not getting into rate limit trouble as well as not adding unnecessary load to the production environment.

ip75 · April 25, 2021, 8:39am

do you see output of drill command ? TXT record that necessary to issue certificate are registered and 1.1.1.1 DNS server see them but API replies that there are no TXT records in domain zone.

I just read what server said and made --renew. With --stateless parameter I got the same error.

Osiris · April 25, 2021, 8:45am

I can't see that part in your output. The thing I do see is:

The domain 'bvginenglish.com' seems to have a ECC cert already

Which is a different thing altogether.

Also, no idea what "is not an issued domain" means.. It's not a text from the API, but from acme.sh. In fact, I don't see any API message anywhere, just acme.sh-only output.

JuergenAuer · April 25, 2021, 8:55am

Hi @ip75

your name server configuration is fatal buggy. Name server climbing (finding the ip addresses of your name servers) of my own tool had an unexpected loop - https://check-your-website.server-daten.de/?q=bvginenglish.com#nameserver-ipaddresses - the result isn't visible.

Rechecked with Unboundtest - https://unboundtest.com/m/TXT/_acme-challenge.bvginenglish.com/GKP5XDP2

the same loop with a "timeout" result. That's not an exact message, it's a loop without an end.

Unboundtest result

Query results for TXT _acme-challenge.bvginenglish.com
----- Unbound logs -----
Apr 25 08:47:14 unbound[1365669:0] notice: init module 0: validator
Apr 25 08:47:14 unbound[1365669:0] notice: init module 1: iterator
Apr 25 08:47:14 unbound[1365669:0] info: start of service (unbound 1.12.0).
Apr 25 08:47:15 unbound[1365669:0] info: 127.0.0.1 _acme-challenge.bvginenglish.com. TXT IN
Apr 25 08:47:15 unbound[1365669:0] info: resolving _acme-challenge.bvginenglish.com. TXT IN
Apr 25 08:47:15 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:16 unbound[1365669:0] info: response for . NS IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:500:9f::42#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: priming successful for . NS IN
Apr 25 08:47:16 unbound[1365669:0] info: response for _acme-challenge.bvginenglish.com. TXT IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:500:200::b#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for _acme-challenge.bvginenglish.com. TXT IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <com.> 2001:501:b1f9::30#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: resolving ns2.bvgm.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving bvgm.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving bvgm.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving ns2.bvgm.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: response for ns2.bvgm.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:dc3::35#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: resolving a2.org.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving b0.org.afilias-nst.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving b0.org.afilias-nst.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving a2.org.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:503:c27::2:30#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 192.33.4.12#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:500:2::c#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: resolving a2.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving a2.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.> 2001:500:f::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: resolving d0.dig.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving d0.dig.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving b2.info.afilias-nst.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving c0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving c0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving b2.info.afilias-nst.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving a0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: resolving a0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 198.41.0.4#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:500:a8::e#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 199.7.91.13#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 2001:500:1b::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 2001:500:19::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 2001:500:1c::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:6::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:8::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:8::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 199.254.49.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 199.254.31.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 199.254.50.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 199.254.49.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for d0.dig.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 199.254.31.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for d0.dig.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 2001:500:1b::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for d0.dig.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:6::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was nodata ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for d0.dig.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:6::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was nodata ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for d0.dig.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:9::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for d0.dig.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 65.22.9.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.> 2001:500:c::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for d0.dig.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:8::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.org.> 65.22.9.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.org.> 2a01:8840:8::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.afilias-nst.org.> 2001:500:e::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.afilias-nst.org.> 2001:500:b::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:500:12::d0d#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 199.254.50.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 65.22.9.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.afilias-nst.info.> 199.19.56.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.afilias-nst.info.> 2001:500:e::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for b0.org.afilias-nst.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.afilias-nst.org.> 2001:500:c::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 199.249.113.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:9::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.org.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.afilias-nst.info.> 199.19.53.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for ns2.bvgm.org. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.> 199.19.54.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for ns2.bvgm.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 193.0.14.129#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for bvgm.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:500:200::b#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for ns2.bvgm.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.> 199.249.120.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for bvgm.org. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <org.> 199.249.112.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:500:200::b#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 2001:500:1::53#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <.> 198.97.190.53#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 2001:500:49::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 2001:500:1a::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:6::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 199.254.50.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for a0.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 2001:500:1c::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.> 199.249.113.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:7::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <afilias-nst.info.> 65.22.8.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:16 unbound[1365669:0] info: response for c0.info.afilias-nst.info. A IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 199.254.31.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 199.254.48.1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:16 unbound[1365669:0] info: response for a2.info.afilias-nst.info. AAAA IN
Apr 25 08:47:16 unbound[1365669:0] info: reply from <info.afilias-nst.info.> 2001:500:19::1#53
Apr 25 08:47:16 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:17 unbound[1365669:0] info: response for bvgm.org. A IN
Apr 25 08:47:17 unbound[1365669:0] info: reply from <.> 199.7.83.42#53
Apr 25 08:47:17 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:17 unbound[1365669:0] info: response for bvgm.org. A IN
Apr 25 08:47:17 unbound[1365669:0] info: reply from <org.> 2001:500:c::1#53
Apr 25 08:47:17 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:29 unbound[1365669:0] info: Capsforid: timeouts, starting fallback
Apr 25 08:47:29 unbound[1365669:0] info: resolving ns.bvgm.org. AAAA IN
Apr 25 08:47:29 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:29 unbound[1365669:0] info: resolving video.goswami.ru. A IN
Apr 25 08:47:29 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:29 unbound[1365669:0] info: resolving video.goswami.ru. AAAA IN
Apr 25 08:47:29 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:29 unbound[1365669:0] info: Capsforid: timeouts, starting fallback
Apr 25 08:47:30 unbound[1365669:0] info: response for . NS IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <.> 199.7.83.42#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:30 unbound[1365669:0] info: priming successful for . NS IN
Apr 25 08:47:30 unbound[1365669:0] info: priming successful for . NS IN
Apr 25 08:47:30 unbound[1365669:0] info: priming successful for . NS IN
Apr 25 08:47:30 unbound[1365669:0] info: response for ns.bvgm.org. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <.> 2001:dc3::35#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: resolving c0.org.afilias-nst.info. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: resolving c0.org.afilias-nst.info. A IN
Apr 25 08:47:30 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <.> 199.7.91.13#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <.> 2001:500:2f::f#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. A IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <.> 192.58.128.30#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <info.> 2001:500:19::1#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:6::1#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. A IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <info.> 199.254.31.1#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <org.afilias-nst.info.> 2001:500:e::1#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. A IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <afilias-nst.info.> 2a01:8840:6::1#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <org.afilias-nst.info.> 2001:500:e::1#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:30 unbound[1365669:0] info: response for c0.org.afilias-nst.info. A IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <org.afilias-nst.info.> 199.19.53.1#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:30 unbound[1365669:0] info: response for ns.bvgm.org. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <org.> 2001:500:b::1#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <.> 2001:500:200::b#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <ru.> 193.232.128.6#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:30 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:30 unbound[1365669:0] info: reply from <ru.> 194.85.252.62#53
Apr 25 08:47:30 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:31 unbound[1365669:0] info: Capsforid: timeouts, starting fallback
Apr 25 08:47:41 unbound[1365669:0] info: Capsforid: timeouts, starting fallback
Apr 25 08:47:41 unbound[1365669:0] info: resolving ns2.trifle.net. AAAA IN
Apr 25 08:47:41 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:41 unbound[1365669:0] info: resolving ns2.trifle.net. A IN
Apr 25 08:47:41 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:41 unbound[1365669:0] info: Capsforid: timeouts, starting fallback
Apr 25 08:47:41 unbound[1365669:0] info: response for . NS IN
Apr 25 08:47:41 unbound[1365669:0] info: reply from <.> 199.7.91.13#53
Apr 25 08:47:41 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:41 unbound[1365669:0] info: priming successful for . NS IN
Apr 25 08:47:41 unbound[1365669:0] info: priming successful for . NS IN
Apr 25 08:47:41 unbound[1365669:0] info: response for ns2.trifle.net. A IN
Apr 25 08:47:41 unbound[1365669:0] info: reply from <.> 2001:500:2f::f#53
Apr 25 08:47:41 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:41 unbound[1365669:0] info: response for ns2.trifle.net. A IN
Apr 25 08:47:41 unbound[1365669:0] info: reply from <net.> 192.31.80.30#53
Apr 25 08:47:41 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:42 unbound[1365669:0] info: resolving ns.bvgm.org. A IN
Apr 25 08:47:42 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:42 unbound[1365669:0] info: response for ns2.trifle.net. AAAA IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <.> 198.97.190.53#53
Apr 25 08:47:42 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:42 unbound[1365669:0] info: response for ns2.trifle.net. A IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <trifle.net.> 195.24.156.222#53
Apr 25 08:47:42 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:42 unbound[1365669:0] info: response for ns2.trifle.net. AAAA IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <net.> 2001:503:a83e::2:30#53
Apr 25 08:47:42 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:42 unbound[1365669:0] info: response for . NS IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <.> 2001:500:1::53#53
Apr 25 08:47:42 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:42 unbound[1365669:0] info: priming successful for . NS IN
Apr 25 08:47:42 unbound[1365669:0] info: response for ns.bvgm.org. A IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <.> 192.58.128.30#53
Apr 25 08:47:42 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:42 unbound[1365669:0] info: response for ns.bvgm.org. A IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <org.> 199.249.120.1#53
Apr 25 08:47:42 unbound[1365669:0] info: query response was REFERRAL
Apr 25 08:47:42 unbound[1365669:0] info: response for ns2.trifle.net. AAAA IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <trifle.net.> 195.24.156.222#53
Apr 25 08:47:42 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:42 unbound[1365669:0] info: response for ns2.trifle.net. AAAA IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <trifle.net.> 195.24.156.222#53
Apr 25 08:47:42 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:42 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <goswami.ru.> 2001:470:1f0b:1c94::218#53
Apr 25 08:47:42 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:42 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <goswami.ru.> 195.24.156.218#53
Apr 25 08:47:42 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:42 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:42 unbound[1365669:0] info: reply from <goswami.ru.> 195.24.156.218#53
Apr 25 08:47:42 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:43 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:43 unbound[1365669:0] info: reply from <goswami.ru.> 2001:470:1f0b:1c94::218#53
Apr 25 08:47:43 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:43 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:43 unbound[1365669:0] info: reply from <goswami.ru.> 2001:470:1f0b:1c94::218#53
Apr 25 08:47:43 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:43 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:43 unbound[1365669:0] info: reply from <goswami.ru.> 195.24.156.218#53
Apr 25 08:47:43 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:43 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:43 unbound[1365669:0] info: reply from <goswami.ru.> 2001:470:1f0b:1c94::218#53
Apr 25 08:47:43 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:43 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:43 unbound[1365669:0] info: reply from <goswami.ru.> 195.24.156.218#53
Apr 25 08:47:43 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:43 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:43 unbound[1365669:0] info: reply from <goswami.ru.> 195.24.156.218#53
Apr 25 08:47:43 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:43 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:43 unbound[1365669:0] info: reply from <goswami.ru.> 2001:470:1f0b:1c94::218#53
Apr 25 08:47:43 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:43 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:43 unbound[1365669:0] info: reply from <goswami.ru.> 195.24.156.218#53
Apr 25 08:47:43 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:44 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <goswami.ru.> 195.24.156.218#53
Apr 25 08:47:44 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:44 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <goswami.ru.> 2001:470:1f0b:1c94::218#53
Apr 25 08:47:44 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:44 unbound[1365669:0] info: response for video.goswami.ru. A IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <goswami.ru.> 2001:470:1f0b:1c94::218#53
Apr 25 08:47:44 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:44 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:44 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <goswami.ru.> 195.24.156.218#53
Apr 25 08:47:44 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:44 unbound[1365669:0] info: response for bvgm.org. A IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <bvgm.org.> 185.31.160.60#53
Apr 25 08:47:44 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:44 unbound[1365669:0] info: response for video.goswami.ru. AAAA IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <goswami.ru.> 2001:470:1f0b:1c94::218#53
Apr 25 08:47:44 unbound[1365669:0] info: Capsforid: reply is equal. go to next fallback
Apr 25 08:47:44 unbound[1365669:0] info: response for _acme-challenge.bvginenglish.com. TXT IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <bvginenglish.com.> 176.124.147.86#53
Apr 25 08:47:44 unbound[1365669:0] info: query response was nodata ANSWER
Apr 25 08:47:44 unbound[1365669:0] info: response for _acme-challenge.bvginenglish.com. TXT IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <bvginenglish.com.> 176.124.147.86#53
Apr 25 08:47:44 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:44 unbound[1365669:0] info: prime trust anchor
Apr 25 08:47:44 unbound[1365669:0] info: generate keytag query _ta-4f66. NULL IN
Apr 25 08:47:44 unbound[1365669:0] info: resolving . DNSKEY IN
Apr 25 08:47:44 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:44 unbound[1365669:0] info: resolving _ta-4f66. NULL IN
Apr 25 08:47:44 unbound[1365669:0] info: priming . IN NS
Apr 25 08:47:44 unbound[1365669:0] info: response for . NS IN
Apr 25 08:47:44 unbound[1365669:0] info: reply from <.> 2001:dc3::35#53
Apr 25 08:47:44 unbound[1365669:0] info: query response was ANSWER
Apr 25 08:47:44 unbound[1365669:0] info: priming successful for . NS IN
Apr 25 08:47:44 unbound[1365669:0] info: priming successful for . NS IN

Error running query: read udp 127.0.0.1:44811->127.0.0.1:1053: i/o timeout

ip75 · April 25, 2021, 9:50am

yes. c0.info.afilias-nst.info this server has 4 month ago information about DNS zone.

ok. Which dns server should I use to check TXT records for letsencrypt API ?

ip75 · April 25, 2021, 9:53am

of course. This IP address (95.165.128.150) and zone are have already expired for 4 months.

JuergenAuer · April 25, 2021, 10:06am

And why do you have then a wrong zone definition?

If your zone definition is buggy, Letsencrypt can't work.

ip75 · April 25, 2021, 10:18am

i'm not admin of c0.info.afilias-nst.info server

JuergenAuer · April 25, 2021, 10:21am

You are the domain owner, so you have to change your registrar name server informations. That updates these zone name servers.

ip75 · April 25, 2021, 10:26am

i said that i'd changed zone info 4 months ago.

i just asked simple question.
Which dns sever should I use to check to be sure that Letsencrypt find my TXT records?
Or which dns server Letsencrypt used to check TXT records? I'll use the same dns servers to check to avoid such errors.

JuergenAuer · April 25, 2021, 10:46am

Your question says, you ignore the problem.

You have to fix your basic settings.

Letsencrypt can't find your name servers, so Letsencrypt can't check your TXT entry.

ip75 · April 25, 2021, 11:05am

problem is that c0.info.afilias-nst.info server uses old data from somewhere. I am not able to fix this problem.

Please let's stop this useless dispute.

ip75 · April 25, 2021, 1:13pm

ip75 · April 25, 2021, 3:25pm

this is a solution for this dns issue.