SSL not activating for Sub-domain

I have linkingzz.com Domain. I have hosted one web app on a server. Now I have created a subdomain for that domain and want to host that web app on another server. In A record of domain and sub-domain, I have added the IP address of servers appropriately.

When I run sudo certbot --apache command. It is showing me following error:

Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
  Domain: www.stockmarket.linkingzz.com
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up A for www.stockmarket.linkingzz.com - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.stockmarket.linkingzz.com - check that a DNS record exists for this domain

Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
2024-08-12 17:12:11,884:DEBUG:certbot._internal.error_handler:Encountered exception:
Traceback (most recent call last):
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
    self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
    raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.

2024-08-12 17:12:11,884:DEBUG:certbot._internal.error_handler:Calling registered functions
2024-08-12 17:12:11,885:INFO:certbot._internal.auth_handler:Cleaning up challenges
2024-08-12 17:12:12,043:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
  File "/snap/certbot/3834/bin/certbot", line 8, in <module>
    sys.exit(main())
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/main.py", line 19, in main
    return internal_main.main(cli_args)
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/main.py", line 1894, in main
    return config.func(config, plugins)
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/main.py", line 1450, in run
    new_lineage = _get_and_save_cert(le_client, config, domains,
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/main.py", line 143, in _get_and_save_cert
    lineage = le_client.obtain_and_enroll_certificate(domains, certname)
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/client.py", line 517, in obtain_and_enroll_certificate
    cert, chain, key, _ = self.obtain_certificate(domains)
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/client.py", line 428, in obtain_certificate
    orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
    authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/auth_handler.py", line 108, in handle_authorizations
    self._poll_authorizations(authzrs, max_retries, max_time_mins, best_effort)
  File "/snap/certbot/3834/lib/python3.8/site-packages/certbot/_internal/auth_handler.py", line 212, in _poll_authorizations
    raise errors.AuthorizationError('Some challenges have failed.')
certbot.errors.AuthorizationError: Some challenges have failed.
2024-08-12 17:12:12,044:ERROR:certbot._internal.log:Some challenges have failed.

Hi. Just like it says on the tin: DNS records for www subdomain don't exist. Either add A/AAAA record(s) or exclude this subdomain when requesting a certificate. I would lean to the latter option, as a www subsubdomain is a rather odd thing to have (IMO).

5 Likes

Welcome to the Let's Encrypt Community! :slightly_smiling_face:

I concur with @Nekit.

where a "www subsubdomain" is a secondary subdomain label of "www." to the left of a primary subdomain label (in your case "stockmarket.").

IMO, even a primary subdomain label of "www." to the left of the apex/registered domain name (in your case linkingzz.com) is unnecessary, but I digress.

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.