My main domain has SSL and my subdomain dont have SSL

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:lerg.lt

I ran this command:sudo certbot certonly --manual --preferred-challenges dns -d vvp.lerg.lt

It produced this output:
IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: vvp.lerg.lt
    Type: unauthorized
    Detail: No TXT record found at _acme-challenge.vvp.lerg.lt

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A/AAAA record(s) for that domain
    contain(s) the right IP address.

My web server is (include version): Server version: Apache/2.4.54 (Debian)

The operating system my web server runs on is (include version): debian-11.0-x86_64

My hosting provider, if applicable, is: iv.lt

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):certbot 1.12.0

Hello @Nolife159159, welcome to the Let's Encrypt community. :slightly_smiling_face:

Here is a list of issued certificates crt.sh | lerg.lt, none of them have vvp.lerg.lt nor have a wildcard.

and

implies to me you are using the DNS-01 Challenge of the Challenge Types - Let's Encrypt
so I would think that a certificate containing wildcard domain name would be a reasonable choice.

1 Like

what should i do ? how can i add wildcard first time using certbot

i added vvp A to point to my server ip

OK; please read

1 Like

so if i understand it right i need to set _acme-challenge.vvp.lerg.lt as TXT ? but what name should be ?

Presently you have one that contains lerg.lt and www.lerg.lt.
Do you want vvp.lerg.lt and lerg.lt and *.lerg.lt to all have one common issued certificate?

Or are you wanting a sperate certificate issued for vvp.lerg.lt?

1 Like

Well not sure what is better i can use the same certificate for vvp.lerg.lt

One choice would be just a wildcard -d lerg.lt -d "*.lerg.lt" ; this would allow you to add new subdomain names without having to get certificates reissued.

Another choice would be to have -d lerg.lt -d www.lerg.lt -d vvp.lerg.lt ; this would exact domain names for the issued certificate.

1 Like

so i can try running sudo certbot certonly --manual --preferred-challenges dns -d lerg.lt -d www.lerg.lt -d vvp.lerg.lt ?

I believe so (note I a not an expert).

Also this is the certificate presently being served https://decoder.link/sslchecker/www.lerg.lt/443

Common Name: 	lerg.lt
SANs: 	DNS:lerg.lt Total number of SANs: 1

vvp.lerg.lt has a name issue shown here SSL Server Test: vvp.lerg.lt (Powered by Qualys SSL Labs)
www.lerg.lt has a name issue shown here SSL Server Test: www.lerg.lt (Powered by Qualys SSL Labs)
lerg.lt is fine shown here SSL Server Test: lerg.lt (Powered by Qualys SSL Labs)

1 Like

How can i solve / fix those name issues?
also i have tryed running sudo certbot certonly --manual --preferred-challenges dns -d lerg.lt -d www.lerg.lt -d vvp.lerg.lt
i got this:
Challenge failed for domain vvp.lerg.lt
dns-01 challenge for vvp.lerg.lt
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: vvp.lerg.lt
    Type: dns
    Detail: DNS problem: NXDOMAIN looking up TXT for
    _acme-challenge.vvp.lerg.lt - check that a DNS record exists for
    this domain

Those issues will be fix with the successful reissuance of the certificate(s) (and having them installed properly and having the web server services restarted).

Kindly wait for more knowledgeable Let's Encrypt community volunteers to assist.

1 Like

if i understand it right i need this
Detail: DNS problem: NXDOMAIN looking up TXT for
_acme-challenge.vvp.lerg.lt - check that a DNS record exists for
this domain

but not sure how can i add that

1 Like

@Nolife159159,

What is your high level objective for the 3 domain names?

  1. vvp.lerg.lt
  2. www.lerg.lt
  3. lerg.lt

I am guessing you want www.lerg.lt and lerg.lt to deliver the same content.
So is vvp.lerg.lt going to be delivering content that different from the other 2?

1 Like

Yeah vvp.lerg.lt will deliver different from lerg.lt and www.lerg.lt

1 Like

also i run this sudo certbot certonly --manual and entered vvp.lerg.lt and i got this

jmOIQ_y9IoGfem1DN-1cPp1X6SQ7PMTTzDUV1jjO3gw.BTYdvn8zv5JjwijnYjvL-ins8n0hk9rW3loEY8biQOY

so do i need to create DNS with name _acme-challenge.vvp.lerg.lt as TXT and that what i got for an value ?

Since all 3 are the same IPv4 Address and Apache/2.4.54

I think the

would be easier.

1 Like

i can try running this
sudo certbot certonly --manual --preferred-challenges dns -d lerg.lt -d "*.lerg.lt"