# Problems Creating Certificate Failing
**URL:** https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148
**Category:** Help
**Created:** [April 2, 2020, 4:48am UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148 "2020-04-02T04:48:37Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 4:48am UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/1 "2020-04-02T04:48:37Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [https://crt.sh/?q=example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: [lawnveteran.com](http://lawnveteran.com)
I ran this command: sudo certbot --nginx -d [lawnveteran.com](http://lawnveteran.com) -d [www.lawnveteran.com](http://www.lawnveteran.com)
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for [lawnveteran.com](http://lawnveteran.com)
Waiting for verification…
Cleaning up challenges
Failed authorization procedure. [lawnveteran.com](http://lawnveteran.com) (http-01): urn:ietf:params:acme:error:dns :: No valid IP addresses found for [lawnveteran.com](http://lawnveteran.com)
IMPORTANT NOTES:
- The following errors were reported by the server:
My web server is (include version): Digital Ocean
The operating system my web server runs on is (include version): Ubuntu 18.04
My hosting provider, if applicable, is: Digital Ocean
I can login to a root shell on my machine (yes or no, or I don’t know): Yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel): No.
The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you’re using Certbot): certbot 0.31.0
---
### Author:  [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [April 2, 2020, 4:50am UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/2 "2020-04-02T04:50:17Z")
There is no DNS IP for the base name:
Name: [lawnveteran.com](http://lawnveteran.com)
**[empty]**
Name: [www.lawnveteran.com](http://www.lawnveteran.com)
Addresses: 2604:a880:800:c1::18d:4001
142.93.181.82
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 12:35pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/3 "2020-04-02T12:35:04Z")
But why does it say that if I can access my website correctly.
---
### Author:  [@9peppe](https://community.letsencrypt.org/u/9peppe)
#### Post date: [April 2, 2020, 12:44pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/4 "2020-04-02T12:44:17Z")
Because browsers are too smart and add www by themselves. Copy the addresses to the base domain too.
You currently have:
```nohighlight
www IN A 142.93.181.82
www IN AAAA 2604:a880:800:c1::18d:4001
```
You should have:
```nohighlight
@ IN A 142.93.181.82
@ IN AAAA 2604:a880:800:c1::18d:4001
www IN A 142.93.181.82
www IN AAAA 2604:a880:800:c1::18d:4001
```
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 1:44pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/5 "2020-04-02T13:44:36Z")
Does it takes time to reflect the change? I added @ in A and @ in AAA in my Digital Ocean.
---
### Author:  [@9peppe](https://community.letsencrypt.org/u/9peppe)
#### Post date: [April 2, 2020, 1:45pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/6 "2020-04-02T13:45:04Z")
Few seconds to few minutes
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 1:48pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/7 "2020-04-02T13:48:44Z")
Thanks you the best!!! How do you know all this? I can know all programming languages but if I don’t know how to configure a server it makes no sense.
---
### Author:  [@9peppe](https://community.letsencrypt.org/u/9peppe)
#### Post date: [April 2, 2020, 1:51pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/8 "2020-04-02T13:51:12Z")
Sometimes you need to read the source documents: [https://en.wikipedia.org/wiki/Domain\_Name\_System#RFC\_documents](https://en.wikipedia.org/wiki/Domain_Name_System#RFC_documents)
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 1:57pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/9 "2020-04-02T13:57:47Z")
Thanks for sharing. Hopefully someone else in here will find this very useful.
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 2:21pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/10 "2020-04-02T14:21:46Z")
But now i try to do a re run for renewal to see if it will renew and i get the same error as before.
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 2:22pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/11 "2020-04-02T14:22:36Z")
how you get this information?
---
### Author:  [@9peppe](https://community.letsencrypt.org/u/9peppe)
#### Post date: [April 2, 2020, 2:23pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/12 "2020-04-02T14:23:10Z")
show me the whole log.
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 2:26pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/14 "2020-04-02T14:26:29Z")
now it worked. so interesting. Where can i get
> ```
> @ IN A 142.93.181.82
> @ IN AAAA 2604:a880:800:c1::18d:4001
> www IN A 142.93.181.82
> www IN AAAA 2604:a880:800:c1::18d:4001
>
> ```
---
### Author:  [@9peppe](https://community.letsencrypt.org/u/9peppe)
#### Post date: [April 2, 2020, 2:28pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/15 "2020-04-02T14:28:22Z")
where can you get your dns records?
you can type whatever you want in there, as long as it points to actual servers. `@` just means “the top domain in this zone.”
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 2:32pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/17 "2020-04-02T14:32:10Z")
Yeah but where can I get the information itself for my DNS
Like this:
> ```
> @ IN A 142.93.181.82
> @ IN AAAA 2604:a880:800:c1::18d:4001
> www IN A 142.93.181.82
> www IN AAAA 2604:a880:800:c1::18d:4001
>
> ```
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 2:32pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/18 "2020-04-02T14:32:44Z")
I mean you got it from somewhere.
---
### Author:  [@9peppe](https://community.letsencrypt.org/u/9peppe)
#### Post date: [April 2, 2020, 2:33pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/19 "2020-04-02T14:33:16Z")
I copied it from your own posts. You can also get it from the dns servers using `dig` or `nslookup`.
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 2:34pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/20 "2020-04-02T14:34:10Z")
No, I didn’t post that.
---
### Author:  [@9peppe](https://community.letsencrypt.org/u/9peppe)
#### Post date: [April 2, 2020, 2:34pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/21 "2020-04-02T14:34:46Z")
> [@rg305](#):
>
> Name: [www.lawnveteran.com](http://www.lawnveteran.com)
> Addresses: 2604:a880:800:c1::18d:4001
> 142.93.181.82
You did, just not in that format 😉
---
### Author:  [@thewhisperinyourears](https://community.letsencrypt.org/u/thewhisperinyourears)
#### Post date: [April 2, 2020, 2:34pm UTC](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148/22 "2020-04-02T14:34:49Z")
Ahh I see dig or dnslookup! Man you are too good!
[Next page](https://community.letsencrypt.org/t/problems-creating-certificate-failing/118148.md?page=2)