Remote VA DNS timeout for ChangeIP nameservers — all DNS-01 challenges fail on secondary validation

Help
1

I am trying to add new and update existing domains and they are all failing the second validation layer. This is the most recent one i'm trying to add:

My domain is: dev2.passwordmap.com

I ran this command: certbot certonly --manual -d dev2.passwordmap.com --preferred-challenges dns

It produced this output: Requesting a certificate for dev2.passwordmap.com. Please deploy a DNS TXT record under the name: _acme-challenge.dev2.passwordmap.com. with the following value: G4p9aOhTEN_GfZe2s-CYmg6FqYWxhDbi5ihYBk2GZ0I. Before continuing, verify the TXT record has been deployed. Certbot failed to authenticate some domains (authenticator: manual). Domain: dev2.passwordmap.com. Type: dns. Detail: During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.dev2.passwordmap.com. Hint: The Certificate Authority failed to verify the manually created DNS TXT records. Ensure that you created these in the correct location, or try waiting longer for DNS propagation on the next attempt.

My web server is (include version): Apache/2.4.66 (Amazon Linux) with mod_ssl

The operating system my web server runs on is (include version): Amazon Linux 2023

My hosting provider, if applicable, is: Self-hosted (Amazon EC2)

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 2.6.0

2

Sounds like something you need to speak with ChangeIP about.
Are those nameservers synchronizing quickly enough?
Are they blocking IPs/Networks?

3

I mean, yes you need working DNS servers in order to get a certificate, or for your domain to work at all. If you're not running your own DNS servers, you should contact whoever is.