Trying to install in Tomcat and got the following error

[nepalehr]

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: dhis2.nepalehr.org

I ran this command: certbot certonly --standalone -d dhis2.nepalehr.org

It produced this output: Domain: dhis2.nepalehr.org
Type: unauthorized
Detail: Invalid response from
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.

My web server is (include version): Tomcat

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

[_az]

You need to stop Tomcat if it is running, so that Certbot’s --standalone mode can listen to port 80 instead. Only one or the other can be running.

If Tomcat is listening on a different port (e.g. 8080), then you would also need to use:

--standalone --http-01-port 8080

You can also try use --webroot (avoiding stopping Tomcat), but you need to configure Tomcat for that first. See this post if you want to do that: SSL Certificate in Apache Ubuntu 14.04