Problems adding a domain to existing certificate

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
1: app4backpackers.com

2: app4pickup.com

3: catandbarz.com

4: app4backpackers.com.au

5: catandbarz.com.au

6: fensoment.com.au

7: fensomsoftware.com.au

8: gigabout.com.au

9: fensoment.com

10: fensomsoftware.com

11: mail.fensomsoftware.com
I ran this command:
sudo certbot -d app4backpackers.com -d app4pickup.com -d catandbarz.com -d app4backpackers.com.au -d catandbarz.com.au -d fensoment.com.au -d fensomsoftware.com.au -d fensoment.com -d fensomsoftware.com -d gigabout.com.au
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log

How would you like to authenticate and install certificates?


1: Apache Web Server plugin (apache)
2: Nginx Web Server plugin (nginx)


Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2


You have an existing certificate that contains a portion of the domains you
requested (ref: /etc/letsencrypt/renewal/app4pickup.com.conf)

It contains these names: catandbarz.com, app4pickup.com, fensoment.com,
fensomsoftware.com

You requested these names for the new certificate: app4backpackers.com,
app4pickup.com, catandbarz.com, app4backpackers.com.au, catandbarz.com.au,
fensoment.com.au, fensomsoftware.com.au, fensoment.com, fensomsoftware.com,
gigabout.com.au.

Do you want to expand and replace this existing certificate with the new
certificate?


(E)xpand/(C)ancel: E
Renewing an existing certificate for app4backpackers.com and 9 more domains

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: app4backpackers.com.au
Type: dns
Detail: DNS problem: SERVFAIL looking up A for app4backpackers.com.au - the domain's nameservers may be malfunctioning; DNS problem: SERVFAIL looking up AAAA for app4backpackers.com.au - the domain's nameservers may be malfunctioning

Domain: fensomsoftware.com.au
Type: dns
Detail: DNS problem: SERVFAIL looking up A for fensomsoftware.com.au - the domain's nameservers may be malfunctioning; DNS problem: SERVFAIL looking up AAAA for fensomsoftware.com.au - the domain's nameservers may be malfunctioning

Domain: fensoment.com.au
Type: dns
Detail: DNS problem: SERVFAIL looking up A for fensoment.com.au - the domain's nameservers may be malfunctioning; DNS problem: SERVFAIL looking up AAAA for fensoment.com.au - the domain's nameservers may be malfunctioning

Domain: app4backpackers.com
Type: unauthorized
Detail: 2404:9400:1:0:216:3eff:fef2:d5e6: Invalid response from http://app4backpackers.com/.well-known/acme-challenge/HHoYNcU0F5ouPG3jkQwl25CXNYvIbmU70Ikq8GiZTyw: 404

Domain: catandbarz.com
Type: unauthorized
Detail: 2404:9400:1:0:216:3eff:fef2:d5e6: Invalid response from http://catandbarz.com/.well-known/acme-challenge/xTYYguEIfBknoGFz8IUdeT-Ciax8ZsWak2Of0hXD8wc: 404

Domain: catandbarz.com.au
Type: unauthorized
Detail: 2404:9400:1:0:216:3eff:fef2:d5e6: Invalid response from http://catandbarz.com.au/.well-known/acme-challenge/xqGy7cHeAf8LqCUDypiG6QQVPHbQF1Ip6gqZXTCYrhQ: 404

Domain: fensomsoftware.com
Type: unauthorized
Detail: 2404:9400:1:0:216:3eff:fef2:d5e6: Invalid response from http://fensomsoftware.com/.well-known/acme-challenge/geE2Ib2bVcRhGgI-kaSSB29wkPaDNx1YfO5hJ70H87w: 404

Domain: gigabout.com.au
Type: unauthorized
Detail: 2404:9400:1:0:216:3eff:fef2:d5e6: Invalid response from http://gigabout.com.au/.well-known/acme-challenge/0hinnPGLXuh9PJR1ribTcL_YujxMxfV1veHQKmdqZ14: 404

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
My web server is (include version):
nginx version: nginx/1.18.0 (Ubuntu)
The operating system my web server runs on is (include version):
Ubuntu 22.04.4 LTS
Release: 22.04

My hosting provider, if applicable, is:
binarylane.com.au
I can login to a root shell on my machine (yes or no, or I don't know):
Yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 2.11.0

Your DNS seems to be severely broken, see fensomsoftware.com.au | DNSViz.

The nameservers that are configured as authorative nameservers seem to refuse to answer for your domain name. Are the authorative nameservers correctly configured?

2 Likes

I just disabled ip6 in my hosts control panel and the certificate is issued now. I will try to fix my dns issues.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.