# Renewing certificate fails
**URL:** https://community.letsencrypt.org/t/renewing-certificate-fails/151428
**Category:** Help
**Created:** [May 10, 2021, 2:23pm UTC](https://community.letsencrypt.org/t/renewing-certificate-fails/151428 "2021-05-10T14:23:13Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@bill69](https://community.letsencrypt.org/u/bill69)
#### Post date: [May 10, 2021, 2:23pm UTC](https://community.letsencrypt.org/t/renewing-certificate-fails/151428/1 "2021-05-10T14:23:13Z")
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. [crt.sh | example.com](https://crt.sh/?q=example.com)), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: [vpntestalp.com](http://vpntestalp.com)
I ran this command: certbot renew
It produced this output: Processing /etc/letsencrypt/renewal/vpntestalp.com.conf
* * *
Cert is due for renewal, auto-renewing...
Plugins selected: Authenticator standalone, Installer None
Renewing an existing certificate for [vpntestalp.com](http://vpntestalp.com)
Performing the following challenges:
http-01 challenge for [vpntestalp.com](http://vpntestalp.com)
Waiting for verification...
Challenge failed for domain [vpntestalp.com](http://vpntestalp.com)
http-01 challenge for [vpntestalp.com](http://vpntestalp.com)
Cleaning up challenges
Failed to renew certificate [vpntestalp.com](http://vpntestalp.com) with error: Some challenges have failed.
* * *
All renewals failed. The following certificates could not be renewed:
/etc/letsencrypt/live/vpntestalp.com/fullchain.pem (failure)
* * *
1 renew failure(s), 0 parse failure(s)
My web server is (include version):
The operating system my web server runs on is (include version): ubuntu 20.04
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): certbot 1.15.0
---
### Author:  [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [May 10, 2021, 2:29pm UTC](https://community.letsencrypt.org/t/renewing-certificate-fails/151428/2 "2021-05-10T14:29:03Z")
There is not enough detail shown in the logs to explain the failure.
Please run:
`certbot renew -vv`
[and show the resulting logs]
and also the output of:
`curl -4 ifconfig.co`
---
### Author:  [@bill69](https://community.letsencrypt.org/u/bill69)
#### Post date: [June 7, 2021, 8:26am UTC](https://community.letsencrypt.org/t/renewing-certificate-fails/151428/3 "2021-06-07T08:26:53Z")
Sorry for the late reply. I have restarted working on the issue and I found the following error in the log:
Storing nonce: 0003i-Iq3qylgxsh9wyIC8-OR3na3FzWwn0nbs2lFl4SLfY
Challenge failed for domain [vpntestalp.com](http://vpntestalp.com)
http-01 challenge for [vpntestalp.com](http://vpntestalp.com)
Notifying user:
Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
Domain: [vpntestalp.com](http://vpntestalp.com)
Type: connection
Detail: Fetching [http://vpntestalp.com/.well-known/acme-challenge/uB0BcBjFs2gR6Vn8X5TxAuBqz2nvLNsEAjOUPUQQqBU:](http://vpntestalp.com/.well-known/acme-challenge/uB0BcBjFs2gR6Vn8X5TxAuBqz2nvLNsEAjOUPUQQqBU:) Timeout during connect (likely firewall problem)
Hint: The Certificate Authority couldn't exterally verify that the standalone plugin completed the required http-01 challenges. Ensure the plugin is configured correctly and that the changes it makes are accessible from the internet.
Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
Domain: [vpntestalp.com](http://vpntestalp.com)
Type: connection
Detail: Fetching [http://vpntestalp.com/.well-known/acme-challenge/uB0BcBjFs2gR6Vn8X5TxAuBqz2nvLNsEAjOUPUQQqBU:](http://vpntestalp.com/.well-known/acme-challenge/uB0BcBjFs2gR6Vn8X5TxAuBqz2nvLNsEAjOUPUQQqBU:) Timeout during connect (likely firewall problem)
Hint: The Certificate Authority couldn't exterally verify that the standalone plugin completed the required http-01 challenges. Ensure the plugin is configured correctly and that the changes it makes are accessible from the internet.
Encountered exception:
Traceback (most recent call last):
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/auth\_handler.py", line 93, in handle\_authorizations
self.\_poll\_authorizations(authzrs, max\_retries, best\_effort)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/auth\_handler.py", line 181, in \_poll\_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
Calling registered functions
Cleaning up challenges
Stopping server at :::80...
Failed to renew certificate [vpntestalp.com](http://vpntestalp.com) with error: Some challenges have failed.
Traceback was:
Traceback (most recent call last):
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/renewal.py", line 474, in handle\_renewal\_request
main.renew\_cert(lineage\_config, plugins, renewal\_candidate)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/main.py", line 1366, in renew\_cert
renewed\_lineage = \_get\_and\_save\_cert(le\_client, config, lineage=lineage)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/main.py", line 117, in \_get\_and\_save\_cert
renewal.renew\_cert(config, domains, le\_client, lineage)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/renewal.py", line 333, in renew\_cert
new\_cert, new\_chain, new\_key, \_ = le\_client.obtain\_certificate(domains, new\_key)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/client.py", line 375, in obtain\_certificate
orderr = self.\_get\_order\_and\_authorizations(csr.data, self.config.allow\_subset\_of\_names)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/client.py", line 425, in \_get\_order\_and\_authorizations
authzr = self.auth\_handler.handle\_authorizations(orderr, self.config, best\_effort)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/auth\_handler.py", line 93, in handle\_authorizations
self.\_poll\_authorizations(authzrs, max\_retries, best\_effort)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/auth\_handler.py", line 181, in \_poll\_authorizations
raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
Notifying user:
* * *
* * *
All renewals failed. The following certificates could not be renewed:
/etc/letsencrypt/live/vpntestalp.com/fullchain.pem (failure)
Notifying user: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
* * *
Exiting abnormally:
Traceback (most recent call last):
File "/snap/certbot/1201/bin/certbot", line 8, in
sys.exit(main())
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/main.py", line 15, in main
return internal\_main.main(cli\_args)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/main.py", line 1552, in main
return config.func(config, plugins)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/main.py", line 1439, in renew
renewal.handle\_renewal\_request(config)
File "/snap/certbot/1201/lib/python3.8/site-packages/certbot/\_internal/renewal.py", line 499, in handle\_renewal\_request
raise errors.Error("{0} renew failure(s), {1} parse failure(s)".format(
certbot.errors.Error: 1 renew failure(s), 0 parse failure(s)
1 renew failure(s), 0 parse failure(s)
Ask for help or search for solutions at [https://community.letsencrypt.org](https://community.letsencrypt.org). See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
---
### Author:  [@bill69](https://community.letsencrypt.org/u/bill69)
#### Post date: [June 7, 2021, 11:30am UTC](https://community.letsencrypt.org/t/renewing-certificate-fails/151428/4 "2021-06-07T11:30:47Z")
Hi,
looking a bit at the topic it seems the renewal process is looking to validate by querying the DNS for a specific TXT record.
Any information about the TXT value that I need to put in.
---
### Author:  [@rg305](https://community.letsencrypt.org/u/rg305)
#### Post date: [June 7, 2021, 4:30pm UTC](https://community.letsencrypt.org/t/renewing-certificate-fails/151428/5 "2021-06-07T16:30:36Z")
The problem, as I read it, is that port 80 isn't open to your server (or the name is resolving to a wrong IP).
> [@bill69](#):
>
> Timeout during connect (likely firewall problem)
But this is difficult to troubleshoot when using:
> [@bill69](#):
>
> the standalone plugin
---
### Author:  [@system](https://community.letsencrypt.org/u/system)
#### Post date: [July 7, 2021, 4:30pm UTC](https://community.letsencrypt.org/t/renewing-certificate-fails/151428/6 "2021-07-07T16:30:46Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.