No IPv4 addresses found for mongo-ldn.innovatete.ch

Issuance Tech
1

Let’s encrypt seems to fail to resolve my domain. I checked with dig both on Google DNS and my ISP’s DNS and I seem to get a response just fine.

Failed authorization procedure. mongo-ldn.innovatete.ch (tls-sni-01): urn:acme:error:unknownHost :: The server could not resolve a domain name :: No IPv4 addresses found for mongo-ldn.innovatete.ch

2

When using a domain check tool, e.g. https://zonemaster.se/test/864158f803948073 I’m seeing the following errors:

Nameserver dns1.shoutca.st/212.47.237.81 did not return NS records. RCODE was NOERROR. Nameserver dns2.shoutca.st/212.47.236.185 did not return NS records. RCODE was NOERROR. Nameserver dns3.shoutca.st/212.47.250.241 did not return NS records. RCODE was NOERROR.

Add the missing NS records and give it another try. Make sure to check the domain name with e.g. https://zonemaster.se/ first.

3

Thanks fixed all those errors, waited some hours for the cache to clear but still the same error.

4

I’m seeing something odd when looking at this host with the host command.

$ host mongo-ldn.innovatete.ch
mongo-ldn.innovatete.ch has address 178.79.176.33
mongo-ldn.innovatete.ch has IPv6 address 2a01:7e00::f03c:91ff:fe08:a3ac
;; connection timed out; no servers could be reached

I’m not accustomed to seeing some data come back followed by a timeout, and I don’t know offhand what causes that technically. Do you have a Unix machine where you can run host and see if you see the same result? If so, this must have something to do with why the CA can’t manage to complete the DNS resolution either.

5

This domain still appears to show problems at http://www.intodns.com/innovatete.ch.