# Plesk SSL Let's Encrypt Error **URL:** \ **Category:** Help\ **Created:** [October 10, 2022, 2:40am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861 "2022-10-10T02:40:07Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 10, 2022, 2:40am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/1 "2022-10-10T02:40:08Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help. My domain is: test.rafik.sch.id My web server is (include version): reverse proxy nginx-apache nginx version: nginx/1.20.2 Apache/2.4.6 (CloudLinux) The operating system my web server runs on is (include version): CloudLinux 7.9 x86\_64 My hosting provider, if applicable, is: Plesk Obsidian 18.0.46.2 I can login to a root shell on my machine (yes or no, or I don't know): Yes I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Plesk Obsidian 18.0.46.2 The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): Using SSL It Hello Everyone! More than 3 months i've try to issue domain in Plesk Panel using SSL It! well-known as Let's Encrypt, but I've got trouble like: firewall, lookup AAAA records instead of A Record. I don't use IPv6. Domain I was try is: .COM, .ORG, .SCH.ID, .ID. I'm try following to make sure that firewall already turn off, and port 80 and 443 opened. Still can't issue Let's Encrypt. A record and Nameserver already pointed on our server. You can check on attachment as image. I've got response from Plesk development team. It was verified that: 1. Let's Encrypt is working 2. The latest versions of the SSL It! and Let's Encrypt extensions are installed on the server 3. DNS server is operational. No errors were found in regards to the domain test.example.sch.id in BIND logs on Plesk server 4. Subdomain sub.example.sch.id is resolving correctly 5. No similar cases reported to us previously. Additionally, from Let's Encrypt debug you could see that domain is resolved but it failed on step LetsEncryptStaging: Let's Encrypt using libunbound library for checks. libunbound is located on Let's Encrypt / Let's Debug servers. Not on the Plesk server. The library requests all DNS servers in a chain, starting from root servers. For domain [example.com](http://example.com) DNS resolution works in the following way: It starts from "root" servers, to get who is responsible for ".sch.id" zone then ".sch.id" is resolved from servers responsible for ".sch.id" zone then "example.sch.id" is resolved from servers responsible for "sch.id" then "sub.example.sch.id" is resolved from servers responsible for "example.sch.id" DNS resolution can fail at any stage, including ".id" zone servers, you could see it in the attached log. Network stability for UDP/TCP connections from Let's Encrypt servers to DNS servers (root DNS servers, ".id" zone server, "sch.id" zone server, your server) also matters. Troubleshooting of the network should be performed by the server administrator. ![unnamed](https://global.discourse-cdn.com/letsencrypt/original/3X/2/1/21e5ad32ab99f0a96b05594043003e1b3d12395f.png) ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 10, 2022, 3:16am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/2 "2022-10-10T03:16:27Z")
Welcome to the community @devahaminapurnama Thanks for the detailed report. I also see the Let's Encrypt (LE) servers are failing the DNS lookups. But, you will need to wait for a better DNS expert to give better advice. I just want to clear up a couple things One, an AAAA record is not required. But, the LE servers look for one and must see a valid record or a proper "not found" response. If they instead timeout or get a SERVFAIL that is a problem. The same for a CAA record. It is not required but a lookup cannot timeout or get SERVFAIL. You created a "letsdebug-test" file so that the first test request from Let's Debug site gets a 200 OK. I can also see that file from my test server. I don't see any problems using HTTP or HTTPS to reach your site (except the self-signed cert for HTTPS). But, when the actual Let's Encrypt servers try to connect to your site they get the DNS failures. I just saw a SERVFAIL from the Let's Debug test ([see results here](https://letsdebug.net/test.rafik.sch.id/1221212?debug=y)). And, your problems were related to DNS also. I don't have a good guess as to what is wrong. Hopefully another volunteer will. ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 10, 2022, 3:27am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/3 "2022-10-10T03:27:10Z")
Thankyou @MikeMcQ I also saw several other users having the same error as me, and I will wait for the DNS expert for this case and also Plesk Team Support will monitor this discussion for their improvement, for now they are using BIND as their DNS server. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 10, 2022, 5:38pm UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/4 "2022-10-10T17:38:59Z")
Part of the problem might be that the two authoritative servers for the zone `rafik.sch.id` resolve to the same (single) IP: ```nohighlight Name: up1.citrahost.com Address: 103.123.16.140 Name: up2.citrahost.com Address: 103.123.16.140 ``` All requests to both are being sent to one IP; That doubles the normal number of requests and might be triggering an IPS type system along the way. In any case, having one single IP respond for a DNS zone is a very weak design and should be changed. ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 11, 2022, 2:26am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/5 "2022-10-11T02:26:39Z")
Our plesk server more than year with same A record and NS without problem before, it's new policy from Let's Encrypt should have more than one IP to avoid single point of failure ? ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 11, 2022, 3:58pm UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/6 "2022-10-11T15:58:56Z")
> [@devahaminapurnama](#): > > it's new policy from Let's Encrypt should have more than one IP to avoid single point of failure ? No, it's just logical that a single point of failure will eventually fail. ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 12, 2022, 1:20am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/7 "2022-10-12T01:20:32Z")
Okay, i will setup master-slave DNS server for plesk. Hope this help and I will confirm later. ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 12, 2022, 1:05pm UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/8 "2022-10-12T13:05:33Z")
[UPDATED 12/10/2022] I just tried to create a new domain and install SSL, the main domain is in Cloudflare DNS and for this scenario I created 2 A records from the domain pointing to my two servers, without creating master-slave DNS as @rg305 said. I hope all ASN from my ISP are allowed to request Let's Encrypt installation where my company IP is in segment 103.123.16.0/22 In this plan I make 2 A records plesk1.awankilat.my.id -\> 103.123.16.140 plesk2.awankilat.my.id -\> 103.123.16.178 For details, please see the screenshot. Anyway, thankyou very much to the Community Leader @rg305 and @MikeMcQ for helping or anyone who read this case. ![Screenshot_12](https://global.discourse-cdn.com/letsencrypt/original/3X/c/8/c8ed66e6397d64e276e7f72630aa3a53d33d1b1e.png) ![Screenshot_13](https://global.discourse-cdn.com/letsencrypt/original/3X/5/6/56ab0170a90dd9e2ce56b1b3f419828d705e0653.png) ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 12, 2022, 1:13pm UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/9 "2022-10-12T13:13:32Z")
Thanks for the update. So, works using a different DNS provider (Cloudflare) rather than the CitraHost DNS. You might try changing your other domain to use Cloudflare too. ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 13, 2022, 1:15am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/10 "2022-10-13T01:15:56Z")
I don't know what happen to my server, but now both Citrahost and CloudFlare DNS can install Let's Encrypt SSL. This happened right after I opened the problem here, previously for the last 3 months I couldn't install Let's Encrypt SSL at all either using CloudFlare or Citrahost DNS. ![Screenshot_40](https://global.discourse-cdn.com/letsencrypt/original/3X/7/1/71225a4c6a3018bf3628e20ff5610b3683e59e4e.png) ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 21, 2022, 3:45pm UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/11 "2022-10-21T15:45:50Z")
Could not issue an SSL/TLS certificate for **[thkforum2022.com](http://thkforum2022.com)** Details Could not issue a Let's Encrypt SSL/TLS certificate for **[thkforum2022.com](http://thkforum2022.com)**. Authorization for the domain failed. Details Invalid response from [https://acme-v02.api.letsencrypt.org/acme/authz-v3/167110499016](https://acme-v02.api.letsencrypt.org/acme/authz-v3/167110499016). Details: Type: urn:ietf:params:acme:error:dns Status: 400 Detail: DNS problem: query timed out looking up A for [thkforum2022.com](http://thkforum2022.com); DNS problem: query timed out looking up AAAA for [thkforum2022.com](http://thkforum2022.com) ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 21, 2022, 3:47pm UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/12 "2022-10-21T15:47:54Z")
last week the other server is fine for issue SSL. but now encountered to error like this [IssueFromLetsEncrypt](https://letsdebug.net/wplesk.citrahost.com/1234640#IssueFromLetsEncrypt-Error) ERROR A test authorization for [wplesk.citrahost.com](http://wplesk.citrahost.com) to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued. 103.123.16.178: Fetching [http://wplesk.citrahost.com/.well-known/acme-challenge/VLO1RvsRwcSjw5uyiyn3YuS-xlDNsQvYeWmBLoIh6YA:](http://wplesk.citrahost.com/.well-known/acme-challenge/VLO1RvsRwcSjw5uyiyn3YuS-xlDNsQvYeWmBLoIh6YA:) Timeout during connect (likely firewall problem) > **[Test result for wplesk.citrahost.com: Error](https://letsdebug.net/wplesk.citrahost.com/1234640)** > > 1 unique issue(s) detected (IssueFromLetsEncrypt) [IssueFromLetsEncrypt](https://letsdebug.net/uplesk.citrahost.com/1234644#IssueFromLetsEncrypt-Error) ERROR A test authorization for [uplesk.citrahost.com](http://uplesk.citrahost.com) to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued. 103.123.16.140: Fetching [http://uplesk.citrahost.com/.well-known/acme-challenge/3fhNVUk7WhCl84Nm\_iE71et94\_C6gJxqTaPZRDYmKz4:](http://uplesk.citrahost.com/.well-known/acme-challenge/3fhNVUk7WhCl84Nm_iE71et94_C6gJxqTaPZRDYmKz4:) Timeout during connect (likely firewall problem) > **[Test result for uplesk.citrahost.com: Error](https://letsdebug.net/uplesk.citrahost.com/1234644)** > > 1 unique issue(s) detected (IssueFromLetsEncrypt) Port 80 and 443 is opened, all of my server is fine nothing changes on firewall side. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [October 21, 2022, 5:59pm UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/13 "2022-10-21T17:59:34Z")
> [@devahaminapurnama](#): > > Timeout during connect (likely firewall problem) > [@devahaminapurnama](#): > > Port 80 and 443 is opened, all of my server is fine nothing changes on firewall side. Those statements contradict each other. _Something_ has changed. _Something_ is now blocking the challenge requests. Other than the "unchanged firewall", are there any other devices/programs/systems/etc. that might be able to block incoming HTTP requests from specific IPs/Networks/Lists/etc.? ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 22, 2022, 1:51am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/14 "2022-10-22T01:51:33Z")
you can scan ports 80 and 443 to prove that ports really open ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 22, 2022, 2:30am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/15 "2022-10-22T02:30:41Z")
Yes, I see the ports open from my own test server. And, a Let's Debug test ([here](https://letsdebug.net/uplesk.citrahost.com/1235069?debug=y)) does two test connections. It's first from its own test system succeeds but the second uses the Let's Encrypt staging system and that, again, fails with timeout. This most likely is due to a firewall blocking the IP(s) that the LE servers use. ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 22, 2022, 2:42am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/16 "2022-10-22T02:42:42Z")
hmm, but all of my firewall already turn off when issue Let's Encrypt sir ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 22, 2022, 2:59am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/17 "2022-10-22T02:59:32Z")
Are you able to view your nginx access log? You should see up to 4 challenge requests from Let's Encrypt in that log. Try running a Let's Debug test and then check the logs. Show us what you see ---
**Author:** ![devahaminapurnama](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/devahaminapurnama/32/63133_2.png) [@devahaminapurnama](https://community.letsencrypt.org/u/devahaminapurnama)\ **Post date:** [October 22, 2022, 3:25am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/18 "2022-10-22T03:25:28Z")
**error.log** 2022/10/22 06:39:29 [crit] 248002#0: \*124293 SSL\_do\_handshake() failed (SSL: error:141CF06C:SSL routines:tls\_parse\_ctos\_key\_share:bad key share) while SSL handshaking, client: 198.199.89.210, server: 103.123.16.178:443 2022/10/22 07:40:50 [crit] 248002#0: \*125415 SSL\_do\_handshake() failed (SSL: error:141CF06C:SSL routines:tls\_parse\_ctos\_key\_share:bad key share) while SSL handshaking, client: 178.62.253.99, server: 103.123.16.178:443 2022/10/22 08:44:09 [crit] 248002#0: \*126955 SSL\_do\_handshake() failed (SSL: error:141CF06C:SSL routines:tls\_parse\_ctos\_key\_share:bad key share) while SSL handshaking, client: 178.62.105.178, server: 103.123.16.178:443 **access.log** 127.0.0.1 - - [22/Oct/2022:10:13:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 127.0.0.1 - - [22/Oct/2022:10:14:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 127.0.0.1 - - [22/Oct/2022:10:15:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 127.0.0.1 - - [22/Oct/2022:10:16:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 127.0.0.1 - - [22/Oct/2022:10:17:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 127.0.0.1 - - [22/Oct/2022:10:18:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 114.119.132.9 - - [22/Oct/2022:10:18:53 +0700] "GET /sitemapmobile900.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 127.0.0.1 - - [22/Oct/2022:10:19:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 157.230.26.103 - - [22/Oct/2022:10:19:48 +0700] "|\xB2\xA2v0v" 400 150 "-" "-" 157.230.26.103 - - [22/Oct/2022:10:19:49 +0700] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xEA\x83\xDC\xB9kP\xDC\xB54\xE5\xD2+d5\xD9n\x0E\x13(\xC3\x10\xB8\x12Y\x13\xD8\xAE\x8BA\xB6h\xE1\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" 157.230.26.103 - - [22/Oct/2022:10:19:49 +0700] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x85\x06\xC7\x10\xCC\xA3\xBC\xE6?\xF0(\x12\x95\xA0\xD0\xF9\xE2\xFD\x9A\xAA\x1CA\x08@M\x01\xC7:\xA0\x90\xFDr\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" 127.0.0.1 - - [22/Oct/2022:10:20:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 127.0.0.1 - - [22/Oct/2022:10:21:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 127.0.0.1 - - [22/Oct/2022:10:22:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 198.199.101.62 - - [22/Oct/2022:10:22:38 +0700] "GET /hudson HTTP/1.1" 404 196 "-" "Mozilla/5.0 zgrab/0.x" 127.0.0.1 - - [22/Oct/2022:10:23:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 127.0.0.1 - - [22/Oct/2022:10:24:21 +0700] "GET /nginx-status HTTP/1.1" 200 109 "-" "Python-urllib/3.6" 114.119.132.88 - - [22/Oct/2022:10:24:40 +0700] "GET /sitemapimages96.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 22, 2022, 3:31am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/19 "2022-10-22T03:31:52Z")
There are no entries related to Let's Debug or Let's Encrypt in either of those logs Are you sure your DNS is pointing to the right system? Does result of this command match your DNS IP? ```nohighlight curl -4 http://ifconfig.co ``` From a Let's Debug test, you should see a request for this that returns a 200 HTTP status code: ```nohighlight http://uplesk.citrahost.com/.well-known/acme-challenge/letsdebug-test ``` (you must have created a letsdebug-test file otherwise this would fail with 404 - which is more normal) ---
**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\ **Post date:** [October 22, 2022, 3:38am UTC](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861/20 "2022-10-22T03:38:36Z")
Oh, I just realized you are showing the logs for wplesk (I see it's IP in the error log). I previously linked to a Let's Debug test for uplesk domain Let me know which you are testing now Still, you should see at least a result in your access log for the letsdebug-test request from a Let's Debug test. One for wplesk is here showing a 404 response ([here](https://letsdebug.net/wplesk.citrahost.com/1235097?debug=y)) (you must not have created a letsdebug-test file on this server which is fine) [Next page](https://community.letsencrypt.org/t/plesk-ssl-lets-encrypt-error/185861.md?page=2)