The problem with issuing a certificate

Help
1

Hello! I have a problem with issuing a certificate. I am trying to issue a certificate, but I keep getting the following error
image
And so it is with all the domains that I have

2

Hello, and welcome to the community.

You should really try and answer these questions.

If you don't understand some, ask.

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

1 Like
3

I see from your post history that you might be in Russia. Check that your domain doesn't belong to an entity sanctioned by the US government. You won't be able to issue certificates if that's the case:

https://sanctionssearch.ofac.treas.gov/

1 Like
4

I use win-acme.v2.1.20. to issue certificates. Doing N: Create certificate (default settings) . After I choose my domain vertex15.ru and I get the above error. Windows server 2016 datacenter operating system. Certbot is not used. I am also on the territory of Russia. I have 290 domain names, not one of them, I can't update the certificate or issue a new one

5

But I can issue certificates using the following program

image
image1087×613 87.8 KB

6

Is the issue with one specific domain name or all of them?

We need to see the actual error, and your teminal output isn't saying much. You should find the option to make your client speak more ("verbose" or something like that)

1 Like
7

The problem is with all domains. The terminal does not issue any specific error, all that it sends is "Failed to create a certificate". This has never happened before
And when I try to update the certificate, I get the following

image
image985×511 60.3 KB

And I can't figure out what the problem is because there is no definite error

8

"Failed to create order" is a very specific error and can depend on several things:

  • can you reach Let's Encrypt servers?
  • are you ratelimited? (maybe the other app is using a different ACME account)
  • are you banned because of sanctions?

We need to know more. You can wait, or you should investigate. Check if you have failed renewals in your logs, before it started saying "Failed to create order"

1 Like
9

Maybe try using --verbose on the command for more details

2 Likes
10

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.