Verifying pending ssl certificate failed

Help
1

our domain is essentialenergy.ca and I was able to create new ssl or renew expiring ssl from let's encrypt.
But since november, 2023 to present, I cannot create new ssl certificates nor can renew expiring ssle certificates.

It keeps on giving me challenge verifications failed. We use GoDaddy to do the verification challenges.

Need Help...

2

I guess you could travel back in time to 2024 and start over again.
Start by answering all these questions:

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

3 Likes
4

My domain is: essentialenergy.ca
SSL Management: Manage Engine Key Manager Plus

Certbot Agent: certbot 2.2.0

5

Possibly asking GoDaddy might be a better place to start.

1 Like
6

@cuy Can you explain more about what exactly is going wrong?

Have you discussed this with the Manage Engine product provider? Is that product running Certbot for you or do you run certbot yourself?

Because requests to your domain essentialenergy.ca uses a certificate issued by GoDaddy (not Let's Encrypt) which does not expire for 157 more days. (link here)

But, I also see a lot of Let's Encrypt certs for subdomains of that domain. Some of these subdomains have fresh certs but some others will expire soon.

It is difficult to know where to begin to help without more info.

Here is the list from a public Certificate Transparency log for your root domain. Please give some specific example domain names. And, more info about how you have been getting these certs.

4 Likes
7

How are those two things related?
How do they interact with each other?

1 Like
8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.