Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com ), so withholding your domain name here does not increase secrecy, but …

I think it's probably due to you using private IP addresses: Test result for clemsonlca.org: Fatal 2 unique issue(s) detected (ReservedAddress) Let's Encrypt have their DNS resolvers set up to strip private addresses from responses, which in turns breaks th…

OR You can use the DNS-01 authentication method to obtain a cert - which won't need to reach your server. Of course, when you do get a cert, it won't be reachable via anyone on the Internet (without a VPN into your private network). So, you need to think this from that perspective... Where are t…

[image] _az: Let's Encrypt have their DNS resolvers set up to strip private addresses from responses, which in turns breaks the DNSSEC signatures. Since your domain has DNSSEC enabled, that's where the SERVFAIL is coming from. Doesn't that behavior produce a rather less useful error message t…

[image] schoen: Doesn't that behavior produce a rather less useful error message than people would see otherwise? Yes.

SERVFAIL looking up A for

Help

petercooperjr December 10, 2021, 1:45pm 5

Yes.

Topic		Replies	Views
Fails with "SERVFAIL looking up A" Help	2	1396	April 19, 2017
SERVFAIL looking up A for xxxxxx.com domain Help	3	3963	December 18, 2017
Getting DNS problem: SERVFAIL looking up Help	2	9940	September 11, 2017
Getting a SERVFAIL lookup up A for domains Help	3	1107	January 11, 2020
Beginner - "DNS problem: SERVFAIL looking up A for..." Help	10	290	November 13, 2025

SERVFAIL looking up A for

Related topics