My domain is:
geronimostade.de
www.geronimostade.de
I ran this command:
sudo certbot --apache
It produced this output:
Detail: 85.214.142.73: Invalid response from https://www.geronimostade.de/.well-known/acme-challenge/-rdUEV5djDFU7jHKm1QcTTEDa4ShmCSwHSVI63Wl6_8: 404
To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address
My web server is (include version):
apache2 Ubuntu 18.04
The operating system my web server runs on is (include version):
Ubuntu 18.04
My hosting provider, if applicable, is:
strato.de
I can login to a root shell on my machine (yes or no, or I don't know):
Sure
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
No - command line ninja here 
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 0.27.0 (ancient)
Hi together,
let me explain a weird issue.
I have my domains configured at providerside to just link to an IP. In this case its: 85.214.142.73
mentalfall.dewww.mentalfall.dementalfall.comwww.mentalfall.comgeronimostade.dewww.geronimostade.de
All are individual vhosts in my apache config. And all accept for no 6 went through the certbot without any significant issue. Only the www.geronimostade.de refuses to do the acme challenge.
I have to mention that 5. and 6. point to the exact same apache folder, both are configured the same accept for the vhost name of course.
Stripped down here for good measure.
<VirtualHost www.geronimostade.de:80>
ServerAdmin webmaster@localhost
DocumentRoot /var/www/html/web/geronimostade.de/
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>
Any ideas where to look for? For now i have myself locked out for "who knows how long 
" because of attemting to often to fix it.
I cant see the error.... Please help me 
Heres some output of the letsencrypt log:
2024-05-30 22:03:04,681:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/357547420592 HTTP/1.1" 200 1376
2024-05-30 22:03:04,681:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Date: Thu, 30 May 2024 20:03:04 GMT
Content-Type: application/json
Content-Length: 1376
Connection: keep-alive
Boulder-Requester: 1755133552
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: cp09ZmYxBXqE-uTgSR3DsZd4uI3zPW7IQyXuozo3pFgmie9tV18
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
{
"identifier": {
"type": "dns",
"value": "www.geronimostade.de"
},
"status": "invalid",
"expires": "2024-06-06T20:02:57Z",
"challenges": [
{
"type": "http-01",
"status": "invalid",
"error": {
"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "85.214.142.73: Invalid response from https://www.geronimostade.de/.well-known/acme-challenge/-rdUEV5djDFU7jHKm1QcTTEDa4ShmCSwHSVI63Wl6_8: 404",
"status": 403
},
"url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/357547420592/YFZiUA",
"token": "-rdUEV5djDFU7jHKm1QcTTEDa4ShmCSwHSVI63Wl6_8",
"validationRecord": [
{
"url": "http://www.geronimostade.de/.well-known/acme-challenge/-rdUEV5djDFU7jHKm1QcTTEDa4ShmCSwHSVI63Wl6_8",
"hostname": "www.geronimostade.de",
"port": "80",
"addressesResolved": [
"85.214.142.73"
],
"addressUsed": "85.214.142.73"
},
{
"url": "https://www.geronimostade.de/.well-known/acme-challenge/-rdUEV5djDFU7jHKm1QcTTEDa4ShmCSwHSVI63Wl6_8",
"hostname": "www.geronimostade.de",
"port": "443",
"addressesResolved": [
"85.214.142.73"
],
"addressUsed": "85.214.142.73"
}
],
"validated": "2024-05-30T20:03:01Z"
}
]
}
2024-05-30 22:03:04,681:DEBUG:acme.client:Storing nonce: cp09ZmYxBXqE-uTgSR3DsZd4uI3zPW7IQyXuozo3pFgmie9tV18
2024-05-30 22:03:04,682:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:
Domain: www.geronimostade.de
Type: unauthorized
Detail: 85.214.142.73: Invalid response from https://www.geronimostade.de/.well-known/acme-challenge/-rdUEV5djDFU7jHKm1QcTTEDa4ShmCSwHSVI63Wl6_8: 404
To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address.
2024-05-30 22:03:04,683:DEBUG:certbot.error_handler:Encountered exception:
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 82, in handle_authorizations
self._respond(aauthzrs, resp, best_effort)
File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 155, in _respond
self._poll_challenges(aauthzrs, chall_update, best_effort)
File "/usr/lib/python3/dist-packages/certbot/auth_handler.py", line 226, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
certbot.errors.FailedChallenges: Failed authorization procedure. www.geronimostade.de (http-01): urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: 85.214.142.73: Invalid response from https://www.geronimostade.de/.well-known/acme-challenge/-rdUEV5djDFU7jHKm1QcTTEDa4ShmCSwHSVI63Wl6_8: 404
I am missing some fundamental knowledge here but is it possible that the http-01 challenge should get answer from http instead of https ?
"detail": "85.214.142.73: Invalid response from https://www.geronimostade.de ... ???
From my side there is no redirect yet on that vhost.
Edit:
I solved the problem above.
I have just noticed my mistake.
The vhost config for geronimostade.de (non-www version) had wrong ServerName configured with www. 
Just by isolating the logs for this post and by reviewing it step for step i was able to solve the issue.
However I have now run into another problem:
Failed redirect for www.geronimostade.de
Unable to set enhancement redirect for www.geronimostade.de
Which I assume I can fix somehow... Thanks anyway. And have an awesome weekend!
