Problem giving domain let's encrypt certificate

Help
1

My domain is: aks-amt.alfing.de

I ran this command: wanted to install Let's Encrypt certificate for this domain

It produced this output:
SSL/TLS-Zertifikat konnte für aks-amt.alfing.de nicht ausgestellt werden.
Details:
Let's Encrypt-SSL/TLS-Zertifikat konnte nicht ausgestellt werden für aks-amt.alfing.de. Die Autorisierung dieser Domain ist fehlgeschlagen.
Details
Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/183944320627.

Details:

Type: urn:ietf:params:acme:error:connection

Status: 400

Detail: 2001:67c:2378:8015::156: Fetching Page not found | ALFING received disallowed redirect status code

My web server is (include version):
Plesk webserver, PHP 7.0

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Plesk

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): don't know

thx
Florian

2

Hello @sineos, welcome to the Let's Encrypt community. :slightly_smiling_face:

Using this online tool SSL Server Test (Powered by Qualys SSL Labs) shows that the domain has an IPv4 & IPv6 Addresses.
However the two IP Addresses are not responding with the same information SSL Server Test: aks-amt.alfing.de (Powered by Qualys SSL Labs)

image
image1143×619 24.7 KB

3

Also using this online tool https://letsdebug.net/ has reported these results: Let's Debug

image
image1086×683 13.6 KB

4

I also think you may have a DNS issue, using this on line tool DNS Lookup - Check DNS Records with www.aks-amt.alfing.de as the input I see these results DNS Lookup - Check DNS Records

image
image1286×690 11.3 KB

6

HTTP redirects to HTTPS.
[HTTPS redirects to the "www"]
But it returns 404.

We should review your configs to ensure they can serve the challenge files correctly.
OR
You could place a test text file in the expected challenge location and see if it can be reached.
OR
Both - LOL

7

Domain hoster removed IPV6 and now it's working :slight_smile:

Thx for all replies!

8

They did not explain why it was doing what it was doing?