Unable to perform validation for challenge :: authorization must be pending

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

The domains below should be verifiable by DNS TXT challenge response, but when we request that LE make that challenge request, we get 400 Unable to perform validation for challenge :: authorization must be pending for these domain.

My domain is:
m-preview.gala.de
m-preview.brigitte.de

I ran this command:
https://acme-v01.api.letsencrypt.org/acme/authz-v3/2641151264
https://acme-v01.api.letsencrypt.org/acme/authz-v3/2641151272

It produced this output:
400 Unable to perform validation for challenge :: authorization must be pending
400 Unable to perform validation for challenge :: authorization must be pending

My web server is (include version):

The operating system my web server runs on is (include version):
Debian Linux

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):
not root, read only

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no, I have limited command line access. I can request admin to run commands.

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

1 Like

The authoritative nameservers for haproxy-harmony-mtk-prod.web.guj.digital are misconfigured.

Two of its nameservers refuse to answer queries for it.

Server Response
dns-auth-1.mcs.de Failed: Query Refused: There is a problem with the DNS server at dns-auth-1.mcs.de
dns-auth-4.mcs.de Failed: Query Refused: There is a problem with the DNS server at dns-auth-4.mcs.de
dns1.guj.de dns66.guj.de
dns2.guj.de dns66.guj.de
3 Likes