# Unable to generate SSL

**URL:** <https://community.letsencrypt.org/t/unable-to-generate-ssl/227392>\
**Category:** Help\
**Created:** [October 16, 2024, 8:11am UTC](https://community.letsencrypt.org/t/unable-to-generate-ssl/227392 "2024-10-16T08:11:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![venkatakrishna143](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/venkatakrishna143/32/83100_2.png) [@venkatakrishna143](https://community.letsencrypt.org/u/venkatakrishna143)\
**Post date:** [October 16, 2024, 8:11am UTC](https://community.letsencrypt.org/t/unable-to-generate-ssl/227392/1 "2024-10-16T08:11:21Z")

</div>

My domain is: [api.smartaihr.com](http://api.smartaihr.com)

I ran this command : sudo certbot --apache -d [api.smartaihr.com](http://api.smartaihr.com) -d [www.api.smartaihr.com](http://www.api.smartaihr.com) -v

It produced this output :  
Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority  
reported these problems:  
Domain: [api.smartaihr.com](http://api.smartaihr.com)  
Type: unauthorized  
Detail: 2a02:4780:b:1268:0:1ece:1480:10: Invalid response from [http://api.smartaihr.com/.well-](http://api.smartaihr.com/.well-)  
known/acme-challenge/zA6uk4EpgM1ASG137Ocs1B1Q2Tcr9V9gtevMwvj2f8Y: 404

My web server is (include version):using apache2

The operating system my web server runs on is (include version):ubuntu

i have already installed ssl for only [www.api.smartaihr.com](http://www.api.smartaihr.com) but i need to install [api.smartaihr.com](http://api.smartaihr.com) as well

my config file looks like this  
\<VirtualHost \*:80\>  
ServerName [api.smartaihr.com](http://api.smartaihr.com)  
ServerAlias [www.api.smartaihr.com](http://www.api.smartaihr.com)

```
DocumentRoot /var/www/smartaihr

ProxyPreserveHost On

# Allow Let's Encrypt to verify ownership
Alias /.well-known/acme-challenge/ /var/www/smartaihr/.well-known/acme-challenge/

<Directory "/var/www/smartaihr/.well-known/acme-challenge/">
    Options None
    AllowOverride None
    Require all granted
</Directory>

# Redirect all other traffic to HTTPS (after Certbot completes)
 RewriteEngine On
 RewriteCond %{REQUEST_URI} !^/.well-known/acme-challenge/
 RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]

```

all other spec are working fine i am running a jar file so can someone help with this ? thanks

---

<div class="post-metadata">

**Author:** ![MikeMcQ](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mikemcq/32/52772_2.png) [@MikeMcQ](https://community.letsencrypt.org/u/MikeMcQ)\
**Post date:** [October 16, 2024, 12:11pm UTC](https://community.letsencrypt.org/t/unable-to-generate-ssl/227392/2 "2024-10-16T12:11:20Z")

</div>

Welcome @venkatakrishna143

You have both an IPv4 A record and an IPv6 AAAA record in your DNS just for your `api` domain name

But, the IPv6 address points to a Hostinger service not your server. Hostinger creates this AAAA record automatically for new setups.

You need to update the AAAA address or remove it if you do not support IPv6.

Any client trying to use IPv6 will connect to that Hostinger service instead of your server.  
Let's Encrypt favors IPv6 when an AAAA record is present.

See Hostinger article here: [How to manage AAAA records | Hostinger Help Center](https://support.hostinger.com/en/articles/8899705-how-to-manage-aaaa-records)

And use this site to test connections  
[https://letsdebug.net](https://letsdebug.net)

---

<div class="post-metadata">

**Author:** ![venkatakrishna143](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/venkatakrishna143/32/83100_2.png) [@venkatakrishna143](https://community.letsencrypt.org/u/venkatakrishna143)\
**Post date:** [October 16, 2024, 7:21pm UTC](https://community.letsencrypt.org/t/unable-to-generate-ssl/227392/3 "2024-10-16T19:21:09Z")

</div>

you are right after removing it I am able to installed thanks for your support

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [November 15, 2024, 7:21pm UTC](https://community.letsencrypt.org/t/unable-to-generate-ssl/227392/4 "2024-11-15T19:21:49Z")

</div>

Closed on November 15, 2024, 7:21pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.