Please fill out the fields below so we can help you better.
Have new certificate installed using --webroot.
Primary domain and sub-domain work well.
Have error with sub-domains when attempting dry run renewal.
I’m really stumpt with this one.
My domain is:
inkblotcreations.com www.inkblotcreations.com beta.inkblotcreations.com www.beta.inkblotcreations.com
I ran this command: sudo certbot renew --dry-run
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/inkblotcreations.com.conf
-------------------------------------------------------------------------------
Cert not due for renewal, but simulating renewal for dry run
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for inkblotcreations.com
http-01 challenge for beta.inkblotcreations.com
http-01 challenge for www.beta.inkblotcreations.com
http-01 challenge for www.inkblotcreations.com
Waiting for verification...
Cleaning up challenges
Attempting to renew cert from /etc/letsencrypt/renewal/inkblotcreations.com.conf produced an unexpected error: Failed authorization procedure. www.beta.inkblotcreations.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.beta.inkblotcreations.com/.well-known/acme-challenge/hYtrRgBvhBZdVGLHOK0-6UrBoytUhpU6LEAsVIonGP0: "<html>
<head><title>404 Not Found</title></head>
<body bgcolor="white">
<center><h1>404 Not Found</h1></center>
<hr><center>", beta.inkblotcreations.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://beta.inkblotcreations.com/.well-known/acme-challenge/7_HeiZklyShnmZ8i9S0zxEcu1rixfSkzL2LR8DSd7B4: "<html>
<head><title>404 Not Found</title></head>
<body bgcolor="white">
<center><h1>404 Not Found</h1></center>
<hr><center>". Skipping.
** DRY RUN: simulating 'certbot renew' close to cert expiry
** (The test certificates below have not been saved.)
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/inkblotcreations.com/fullchain.pem (failure)
** DRY RUN: simulating 'certbot renew' close to cert expiry
** (The test certificates above have not been saved.)
1 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: www.beta.inkblotcreations.com
Type: unauthorized
Detail: Invalid response from
http://www.beta.inkblotcreations.com/.well-known/acme-challenge/hYtrRgBvhBZdVGLHOK0-6UrBoytUhpU6LEAsVIonGP0:
"<html>
<head><title>404 Not Found</title></head>
<body bgcolor="white">
<center><h1>404 Not Found</h1></center>
<hr><center>"
Domain: beta.inkblotcreations.com
Type: unauthorized
Detail: Invalid response from
http://beta.inkblotcreations.com/.well-known/acme-challenge/7_HeiZklyShnmZ8i9S0zxEcu1rixfSkzL2LR8DSd7B4:
"<html>
<head><title>404 Not Found</title></head>
<body bgcolor="white">
<center><h1>404 Not Found</h1></center>
<hr><center>"
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A record(s) for that domain
contain(s) the right IP address.
My web server is (include version): nginx version: nginx/1.10.3 (Ubuntu)
The operating system my web server runs on is (include version): Ubuntu 16.04.2 LTS
My hosting provider, if applicable, is: DigitalOcean
I can login to a root shell on my machine (yes or no, or I don’t know): Yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Yes
Additional Information:
server {
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;
server_name inkblotcreations.com www.inkblotcreations.com;
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
include snippets/ssl-inkblotcreations.com.conf;
include snippets/ssl-params.conf;
server_name inkblotcreations.com www.inkblotcreations.com;
root /home/user/www/;
index index.html;
location / { try_files $uri $uri/ =404; }
location /home/user/www/.well-known/acme-challenge { allow all; }
}
server {
listen 80;
listen [::]:80;
server_name beta.inkblotcreations.com www.beta.inkblotcreations.com;
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:433 ssl http2;
include snippets/ssl-inkblotcreations.com.conf;
include snippets/ssl-params.conf;
server_name beta.inkblotcreations.com www.beta.inkblotcreations.com;
root /home/user/beta/;
index index.html;
location / { try_files $uri $uri/ =404; }
location /home/user/beta/.well-known/acme-challenge { allow all; }
}