# Not able to Generate SSL Certificates **URL:** \ **Category:** Help\ **Created:** [May 7, 2020, 9:06am UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995 "2020-05-07T09:06:44Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![HarhuTech](https://avatars.discourse-cdn.com/v4/letter/h/7993a0/32.png) [@HarhuTech](https://community.letsencrypt.org/u/HarhuTech)\ **Post date:** [May 7, 2020, 9:06am UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995/1 "2020-05-07T09:06:44Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: [datoromedia.com](http://datoromedia.com) I ran this command: sudo certbot certonly --agree-tos --email [anil.harhu@gmail.com](mailto:anil.harhu@gmail.com) --webroot -w /var/lib/letsencrypt/ -d [datoromedia.com](http://datoromedia.com) -d [www.datoromedia.com](http://www.datoromedia.com) It produced this output: Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Obtaining a new certificate Performing the following challenges: http-01 challenge for [datoromedia.com](http://datoromedia.com) http-01 challenge for [www.datoromedia.com](http://www.datoromedia.com) Using the webroot path /var/lib/letsencrypt for all unmatched domains. Waiting for verification… Cleaning up challenges Failed authorization procedure. [www.datoromedia.com](http://www.datoromedia.com) (http-01): urn:ietf:params:acme:error:dns :: No valid IP addresses found for [www.datoromedia.com](http://www.datoromedia.com), [datoromedia.com](http://datoromedia.com) (http-01): urn:ietf:params:acme:error:dns :: No valid IP addresses found for [datoromedia.com](http://datoromedia.com) IMPORTANT NOTES: - The following errors were reported by the server: My web server is (include version): The operating system my web server runs on is (include version): Ubuntu My hosting provider, if applicable, is: I can login to a root shell on my machine (yes or no, or I don’t know): I’m using a control panel to manage my site (no, or provide the name and version of the control panel): The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot): ---
**Author:** ![9peppe](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/9peppe/32/31596_2.png) [@9peppe](https://community.letsencrypt.org/u/9peppe)\ **Post date:** [May 7, 2020, 9:10am UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995/2 "2020-05-07T09:10:34Z")
You have no ip address configured, configure an ip address in your dns panel (does "transip" mean anything to you?) ```plaintext % dig datoromedia.com ; <<>> DiG 9.16.1-Ubuntu <<>> datoromedia.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9688 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 65494 ;; QUESTION SECTION: ;datoromedia.com. IN A ;; Query time: 0 msec ;; SERVER: 127.0.0.53#53(127.0.0.53) ;; WHEN: gio mag 07 11:08:50 CEST 2020 ;; MSG SIZE rcvd: 44 ``` > [@HarhuTech](#): > > My web server is (include version): You should answer this question ---
**Author:** ![HarhuTech](https://avatars.discourse-cdn.com/v4/letter/h/7993a0/32.png) [@HarhuTech](https://community.letsencrypt.org/u/HarhuTech)\ **Post date:** [May 7, 2020, 10:32am UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995/3 "2020-05-07T10:32:50Z")
![configured_ip](https://global.discourse-cdn.com/letsencrypt/original/3X/7/e/7ebae1acd913ef710df93bcdd9471196e7ae8b34.png) It’s already configured, Can you help what wrong I’ve configured? ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [May 7, 2020, 10:48am UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995/4 "2020-05-07T10:48:36Z")
Hi @HarhuTech > [@HarhuTech](#): > > It’s already configured looks like you are doing something wrong - see [datoromedia.com - Make your website better - DNS, redirects, mixed content, certificates](https://check-your-website.server-daten.de/?q=datoromedia.com) | Host | T | IP-Address | is auth. | ∑ Queries | ∑ Timeout | | --- | --- | --- | --- | --- | --- | | [datoromedia.com](http://datoromedia.com) | A | | yes | 2 | 0 | | | AAAA | | yes | | | | [www.datoromedia.com](http://www.datoromedia.com) | C | [datoromedia.com](http://datoromedia.com) | yes | 1 | 0 | Your CNAME exists. But no A-record. But the reason is simple: > :~$ dig A \*.datoromedia.com.datoromedia.com. > > ; \<\<\>\> DiG 9.11.3-1ubuntu1.11-Ubuntu \<\<\>\> A \*.datoromedia.com.datoromedia.com. > ;; global options: +cmd > ;; Got answer: > ;; -\>\>HEADER\<\<- opcode: QUERY, status: NOERROR, id: 263 > ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 512 > ;; QUESTION SECTION: > ;\*.datoromedia.com.datoromedia.com. IN A > > ;; ANSWER SECTION: > \*.datoromedia.com.datoromedia.com. 300 IN A 134.209.81.249 > > ;; Query time: 99 msec > ;; SERVER: 192.168.0.1#53(192.168.0.1) > ;; WHEN: Thu May 07 12:46:10 CEST 2020 > ;; MSG SIZE rcvd: 78 Your main domain doesn't have an A record. Instead, the subdomain ```nohighlight *.datoromedia.com.datoromedia.com. ``` has one. Create an A record with @ as name and your ip address, then recheck your domain with the online tool to see, if your A-record is visible. ---
**Author:** ![HarhuTech](https://avatars.discourse-cdn.com/v4/letter/h/7993a0/32.png) [@HarhuTech](https://community.letsencrypt.org/u/HarhuTech)\ **Post date:** [May 7, 2020, 4:44pm UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995/5 "2020-05-07T16:44:31Z")
> [@JuergenAuer](#): > > our A-record is visible. Thanks for reply, I did that but still the certificates does not generated and having a same problem. does it take time to update? ---
**Author:** ![JuergenAuer](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/juergenauer/32/26491_2.png) [@JuergenAuer](https://community.letsencrypt.org/u/JuergenAuer)\ **Post date:** [May 7, 2020, 5:01pm UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995/6 "2020-05-07T17:01:31Z")
> [@HarhuTech](#): > > I did that What? There is no new online check of your domain. ---
**Author:** ![HarhuTech](https://avatars.discourse-cdn.com/v4/letter/h/7993a0/32.png) [@HarhuTech](https://community.letsencrypt.org/u/HarhuTech)\ **Post date:** [May 7, 2020, 6:25pm UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995/7 "2020-05-07T18:25:32Z")
It works fine now. thanks a lot. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [June 6, 2020, 6:25pm UTC](https://community.letsencrypt.org/t/not-able-to-generate-ssl-certificates/121995/8 "2020-06-06T18:25:34Z")
Closed on June 6, 2020, 6:25pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.