Renewal works on staging fails on production

Do you have a <VirtualHost *> somewhere in your normal configuration?

If so, does it work correctly if you change that to <VirtualHost *:80> (assuming it's a HTTP virtual host)?

If you add the --debug-challenges option to the certbot command it will pause and wait for input between modifying the configuration and asking the CA to verify the challenge, so you can check how things are set up at that point.

2 Likes