SSL Certificate renewal

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: kristina.me.uk

I ran this command: DirectAdmin 'Get automatic certificate from ACME Provider'

It produced this output: kristina.me.uk was skipped due to unreachable http://kristina.me.uk/.well-known/acme-challenge/ file.
ftp.kristina.me.uk was skipped due to unreachable http://ftp.kristina.me.uk/.well-known/acme-challenge/ file.
mail.kristina.me.uk was skipped due to unreachable http://mail.kristina.me.uk/.well-known/acme-challenge/ file.
pop.kristina.me.uk was skipped due to unreachable http://pop.kristina.me.uk/.well-known/acme-challenge/ file.
smtp.kristina.me.uk was skipped due to unreachable http://smtp.kristina.me.uk/.well-known/acme-challenge/ file.
www.kristina.me.uk was skipped due to unreachable http://www.kristina.me.uk/.well-known/acme-challenge/ file.
No domains pointing to this server to generate the certificate for.

My web server is (include version): Apache

The operating system my web server runs on is (include version):Ubuntu 23.04 x64

My hosting provider, if applicable, is: Vultr

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): DirectAdmin 1.660

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 2.9.0

I have a domain that I set up a SSL certificate for that expires on the 28th March but when I try to renew it from DA 'Get automatic certificate from ACME Provider'

The domain is showing a certificate expiring on the 28th March

The other domains on the server have updated without a problem.

Anyone any ideas?

Welcome @Pens

Looks like a DNS problem :slight_smile: See

In visual form this site is excellent for such problems
https://dnsviz.net/d/kristina.me.uk/dnssec/

4 Likes

Thanks very much.

Solved by adding a DNSkey to the registrar information.

Strange that one of the other domains which had exactly the same DNS settings did renew.

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.