# The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet

**URL:** <https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806>\
**Category:** Help\
**Created:** [July 25, 2022, 8:00pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806 "2022-07-25T20:00:27Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gabriel09](https://avatars.discourse-cdn.com/v4/letter/g/a3d4f5/32.png) [@Gabriel09](https://community.letsencrypt.org/u/Gabriel09)\
**Post date:** [July 25, 2022, 8:00pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/1 "2022-07-25T20:00:27Z")

</div>

I´m having problems creating a SSL certificate.

My domain is: sgm-tenergy.com.mx

I ran this command: sudo certbot --nginx

It produced this output:  
Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Please enter the domain name(s) you would like on your certificate (comma and/or  
space separated) (Enter 'c' to cancel): sgm-tenergy.com.mx  
Requesting a certificate for sgm-tenergy.com.mx

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:  
Domain: sgm-tenergy.com.mx  
Type: unauthorized  
Detail: 200.92.196.82: Invalid response from [http://sgm-tenergy.com.mx/.well-known/acme-challenge/wItuGBvf3MZCOOqPn8RpmAFj1ZoHi6BvifACL9FQbqI:](http://sgm-tenergy.com.mx/.well-known/acme-challenge/wItuGBvf3MZCOOqPn8RpmAFj1ZoHi6BvifACL9FQbqI:) 404

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.

My web server is (include version): Ubuntu 20.04

The operating system my web server runs on is (include version):Ubuntu

My hosting provider, if applicable, is: I don't have

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of `certbot --version` or `certbot-auto --version` if you're using Certbot): certbot 1.29.0

---

<div class="post-metadata">

**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\
**Post date:** [July 25, 2022, 8:07pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/2 "2022-07-25T20:07:59Z")

</div>

Hi @Gabriel09 , and welcome to the LE community forum 🙂

Using this tool [Redirect Checker | Check your Statuscode 301 vs 302](https://www.redirect-checker.org/index.php) with the domain you supplied I get:  
.  
.  
.  
.

### Result

[http://sgm-tenergy.com.mx](http://sgm-tenergy.com.mx)  
**302 Found**  
/login/?next=/  
**200 OK**

### Problems found:

- **You use a 302 redirect**. This means, that the actually content is temporary not reachable and will come back soon. To use a 302 redirection for generally moved pages is a bad idea. Search engine bot might not follow it or handle it as temporary. For SEO this is also a bad idea, because no link juice will be transferred to the linked page.

---

<div class="post-metadata">

**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\
**Post date:** [July 25, 2022, 8:24pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/3 "2022-07-25T20:24:17Z")

</div>

> [@Gabriel09](#):
>
> My web server is (include version): Ubuntu 20.04

What web server are you using?

> [@Gabriel09](#):
>
> sudo certbot --nginx

`Certbot` will try using `nginx` as the web server

But I don't see `nginx` responding:

```nohighlight
curl -Ii http://sgm-tenergy.com.mx/.well-known/acme-challenge/Test_File-1234
HTTP/1.1 404 Not Found
Date: Mon, 25 Jul 2022 20:24:01 GMT
Server: WSGIServer/0.2 CPython/3.8.10
Content-Type: text/html
X-Frame-Options: DENY
Content-Length: 14736
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin

```

---

<div class="post-metadata">

**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\
**Post date:** [July 25, 2022, 8:31pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/4 "2022-07-25T20:31:18Z")

</div>

> [@rg305](#):
>
> `Server: WSGIServer/0.2 CPython/3.8.10`

I also looks like your WSGIServer may not be up-to-date  
Here [Client Challenge](https://pypi.org/project/WSGIserver/) shows WSGIserver 1.3, but maybe I found the wrong one.

---

<div class="post-metadata">

**Author:** ![Gabriel09](https://avatars.discourse-cdn.com/v4/letter/g/a3d4f5/32.png) [@Gabriel09](https://community.letsencrypt.org/u/Gabriel09)\
**Post date:** [July 25, 2022, 8:32pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/5 "2022-07-25T20:32:48Z")

</div>

I'm using Django

---

<div class="post-metadata">

**Author:** ![Gabriel09](https://avatars.discourse-cdn.com/v4/letter/g/a3d4f5/32.png) [@Gabriel09](https://community.letsencrypt.org/u/Gabriel09)\
**Post date:** [July 25, 2022, 8:37pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/6 "2022-07-25T20:37:57Z")

</div>

do I need to update it?

---

<div class="post-metadata">

**Author:** ![Bruce5051](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/bruce5051/32/76576_2.png) [@Bruce5051](https://community.letsencrypt.org/u/Bruce5051)\
**Post date:** [July 25, 2022, 8:49pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/7 "2022-07-25T20:49:48Z")

</div>

@Gabriel09 you might want to review some of these previous recent Django issues

> [@Failed challenge Ubuntu 20, Apache 2, Django](https://community.letsencrypt.org/t/failed-challenge-ubuntu-20-apache-2-django/144847):
>
> I…

> [@Renewing my cert Nginx-Gunicorn-Django](https://community.letsencrypt.org/t/renewing-my-cert-nginx-gunicorn-django/181549):
>
> P…

> [@Certbot - Unable to find corresponding HTTP vhost; Unable to create one as intended addresses conflict; Current configuration does not support automated redirection](https://community.letsencrypt.org/t/certbot-unable-to-find-corresponding-http-vhost-unable-to-create-one-as-intended-addresses-conflict-current-configuration-does-not-support-automated-redirection/179965):
>
> M…

---

<div class="post-metadata">

**Author:** ![Gabriel09](https://avatars.discourse-cdn.com/v4/letter/g/a3d4f5/32.png) [@Gabriel09](https://community.letsencrypt.org/u/Gabriel09)\
**Post date:** [July 25, 2022, 9:30pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/8 "2022-07-25T21:30:26Z")

</div>

I didn't find something that could help me

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 24, 2022, 9:30pm UTC](https://community.letsencrypt.org/t/the-certificate-authority-failed-to-verify-the-temporary-nginx-configuration-changes-made-by-certbot-ensure-the-listed-domains-point-to-this-nginx-server-and-that-it-is-accessible-from-the-internet/181806/9 "2022-08-24T21:30:58Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
