Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is:
dsclub.kr (www.dsclub.kr)
I ran this command:
sudo certbot certonly --webroot --agree-tos -m dsclub2023@gmail.com -w /var/www/html -d dsclub.kr
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for dsclub.kr
Hint: The Certificate Authority failed to download the temporary challenge files created by Certbot. Ensure that the listed domains serve their content from the provided --webroot-path/-w and that files created there can be downloaded from the internet.
Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
My web server is (include version):
nginx/1.24.0
The operating system my web server runs on is (include version):
Ubuntu 24.04 LTS (GNU/Linux 6.8.0-1004-raspi aarch64)
(ubuntu 24.04 lts server for raspi5)
My hosting provider, if applicable, is:
gabia (gabia.com)
I can login to a root shell on my machine (yes or no, or I don't know):
yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 2.9.0
ANotWorking
ERROR
dsclub.kr has an A (IPv4) record (114.200.192.149) but a request to this address over port 80 did not succeed. Your web server must have at least one working IPv4 or IPv6 address.
A timeout was experienced while communicating with dsclub.kr/114.200.192.149: Get "http://dsclub.kr/.well-known/acme-challenge/letsdebug-test": dial tcp 114.200.192.149:80: i/o timeout
Trace:
@0ms: Making a request to http://dsclub.kr/.well-known/acme-challenge/letsdebug-test (using initial IP 114.200.192.149)
@0ms: Dialing 114.200.192.149
@10000ms: Experienced error: dial tcp 114.200.192.149:80: i/o timeout
IssueFromLetsEncrypt
ERROR
A test authorization for dsclub.kr to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
114.200.192.149: Fetching http://dsclub.kr/.well-known/acme-challenge/rN2XZHmOnWe0wl9W5vGVwfH8JFxIJCr1AnfS1lZAuvM: Timeout during connect (likely firewall problem)
Using nmap I see Ports 80 & 443 are filtered (i.e. blocked).
$ nmap -Pn -p80,443 dsclub.kr
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-05-01 17:02 PDT
Nmap scan report for dsclub.kr (114.200.192.149)
Host is up.
PORT STATE SERVICE
80/tcp filtered http
443/tcp filtered https
Nmap done: 1 IP address (1 host up) scanned in 3.70 seconds
Since these are Domain Validation (DV) certificates the Domain Name System (DNS) is used extensively in the validation process as well a allowing us to assist here on Let's Encrypt community.
DNS Queries need to give consistent results from any location on the Internet, all your authoritative DNS Servers for the Domain need to also give consistent results as well.
