Not able to generate ssl certificates

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

stg-cita.com

I ran this command:

sudo certbot certonly --agree-tos --email amit@wiz.asia --webroot -w /var/lib/letsencrypt/ -d stg-cita.com -d www.stg-cita.com

It produced this output:

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for stg-cita.com
http-01 challenge for www.stg-cita.com
Using the webroot path /var/lib/letsencrypt for all unmatched domains.
Waiting for verification...
Challenge failed for domain www.stg-cita.com
Challenge failed for domain stg-cita.com
http-01 challenge for www.stg-cita.com
http-01 challenge for stg-cita.com
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: www.stg-cita.com
    Type: dns
    Detail: DNS problem: NXDOMAIN looking up A for www.stg-cita.com -
    check that a DNS record exists for this domain; DNS problem:
    NXDOMAIN looking up AAAA for www.stg-cita.com - check that a DNS
    record exists for this domain

    Domain: stg-cita.com
    Type: dns
    Detail: DNS problem: SERVFAIL looking up A for stg-cita.com - the
    domain's nameservers may be malfunctioning; DNS problem: SERVFAIL
    looking up AAAA for stg-cita.com - the domain's nameservers may be
    malfunctioning

My web server is (include version):

NGINX

The operating system my web server runs on is (include version):
Ubuntu 20

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):
Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

certbot 0.40.0

Quick question: how is this thread different than your previous one I'm not able to generate SSL Certificates ?

4 Likes

It is related. but there was a mistake in domain name asked in original question, so re-posted as new.

I see you've corrected your opening post in your previous thread where I also commented already. Let's continu there. I'll close this thread in favor of the first one.

4 Likes