Network Solutions DNS problem: SERVFAIL looking up A for

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: pinewaterfarms.org

I ran this command: certbot

It produced this output:DNS problem: SERVFAIL looking up A for pinewaterfarms.org -
the domain’s nameservers may be malfunctioning

My web server is (include version): Apache 2.4

The operating system my web server runs on is (include version): Centos 7

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):certbot 1.0.0

1 Like

Hi @dpman

checking your domain - https://check-your-website.server-daten.de/?q=pinewaterfarms.org

Your nameserver is ns73.worldnic.com.

There is a long topic:

Worldnic name servers don't work. Reason: Unknown.

1 Like

Will there be any solution anytime soon?
I am applying to become a CA, its In Processing…
I have a root CA and an intermediate CA? Can you guys
sign the IM cert so I can issue my own certs?

1 Like

Switch nameserver provider? You can without changing registrars.

1 Like

How can I switch? I have NS at the moment and they host my email…
I host the web site…

1 Like

You change the NS records, making sure the MX records point to their mailserver and A/AAAA point to where your website is.

1 Like

The A record already points to my server… I have several other domains
and this one is the only one not working… Same set up for all of them…

1 Like

So it’s just a fluke. Wait some time and retry.

1 Like

Yupperz, I been trying now for a few weeks thinking the same thing…

1 Like

I probably would have switched after a few days.

I’d suggest looking into it.

2 Likes

Do you have recommended DNS/email pros that you can recommend?
Preferrably ones that work with LE certs! lol…

1 Like

dig pinewaterfarms.org

; <<>> DiG 9.11.4-P2-RedHat-9.11.4-9.P2.el7 <<>> pinewaterfarms.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39538
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;pinewaterfarms.org. IN A

;; ANSWER SECTION:
pinewaterfarms.org. 7200 IN A 100.11.72.140

;; Query time: 51 msec
;; SERVER: 71.242.0.12#53(71.242.0.12)
;; WHEN: Sat Feb 29 12:19:58 EST 2020
;; MSG SIZE rcvd: 63

1 Like

I’ve given you three already! :smiley:
I don’t know if NS pulls some shady stuff to keep your dns, but it’s independent from email and anything else.

Just backup all the things before doing anything.

1 Like

For free DNS services see also: https://cloudns.net/

2 Likes

No, because Let's Encrypt certificates are publicly trusted and Let's Encrypt doesn't have a way to confirm or control whether other CAs perform validation correctly. So Let's Encrypt can't take responsibility for making other CAs publicly trusted by delegating trust to them.

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.