# Which method can I get Let’s Encrypt certificate on server A (the certificate use for Server B) **URL:** \ **Category:** Help\ **Created:** [September 30, 2017, 2:44am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261 "2017-09-30T02:44:34Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![linger](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/linger/32/16873_2.png) [@linger](https://community.letsencrypt.org/u/linger)\ **Post date:** [September 30, 2017, 2:44am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/1 "2017-09-30T02:44:34Z")
I am new to certbot. if commands is “./certbot-auto certonly --standalone” and in the domain([mgfurniture.cn](http://mgfurniture.cn)),get the response is: ``` IMPORTANT NOTES: - The following errors were reported by the server: Domain: mgfurniture.cn Type: unauthorized Detail: Incorrect validation certificate for tls-sni-01 challenge. Requested 9fd48623454fd32c7d7f7a7dcca950a4.0c8755aa373bc030bdbb5ec096290931.acme.invalid from 47.88.9.55:443. Received 4 certificate(s), first certificate had names "*.ly200.com, ly200.com" To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. ``` if the commands is :./certbot-auto certonly --standalone --preferred-challenges tls-sni -d [www.mgfurniture.cn](http://www.mgfurniture.cn) -d [mgfurniture.cn](http://mgfurniture.cn) no response anything note : the domain([mgfurniture.cn](http://mgfurniture.cn)) in server A ,this server’s port 80/443 must free ? certbot-auto in server B server B some info: 1,ip6 is disable; 2,network is ok 3, the post 80/443 is free. how can I do? what can i do ? pls help. ---
**Author:** ![rg305](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/rg305/32/91314_2.png) [@rg305](https://community.letsencrypt.org/u/rg305)\ **Post date:** [September 30, 2017, 3:21am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/2 "2017-09-30T03:21:00Z")
The “server B” probably explains why you are using “–standalone”. If I’m correct, you are trying to get a cert for domain “[mgfurniture.cn](http://mgfurniture.cn)” from a system that is not at the IP resolved by that name (47.88.9.55). Because IP 47.88.9.55 already responds on port 443 with a cert for “[ly200.com](http://ly200.com)” and certbot would not be able to run another standalone server on port 443 - but that wasn’t the error. If so, you won’t be able to get the cert in this manner (directly). The simplest indirect method would be with DNS challenge authentication. ---
**Author:** ![ahaw021](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ahaw021/32/14882_2.png) [@ahaw021](https://community.letsencrypt.org/u/ahaw021)\ **Post date:** [September 30, 2017, 6:23am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/3 "2017-09-30T06:23:14Z")
> [@linger](#): > > 3, the post 80/443 is free. No both are currently being used by NGINX if your domain is [mgfurniture.cn](http://mgfurniture.cn) ![image](https://global.discourse-cdn.com/letsencrypt/original/3X/9/0/9033903cf51c628e51fc6bbfe7d7bb61de8b9296.png) Standalone and certonly are commands which you need to review (so you understand what they do): [User Guide — Certbot 2.7.0.dev0 documentation](https://certbot.eff.org/docs/using.html#standalone) I believe a better approach for you would be to use the --nginx command which you can review here: [User Guide — Certbot 2.7.0.dev0 documentation](https://certbot.eff.org/docs/using.html#nginx) The NGINX plugin will find the right domains (from your configuration file) , configure NGINX to pass the challenge and install the certificates for you all in one go Andrei ---
**Author:** ![linger](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/linger/32/16873_2.png) [@linger](https://community.letsencrypt.org/u/linger)\ **Post date:** [October 9, 2017, 3:13am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/4 "2017-10-09T03:13:22Z")
I’m sorry for the long reply thank you so much @rg305 @ahaw021 Let me try ---
**Author:** ![linger](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/linger/32/16873_2.png) [@linger](https://community.letsencrypt.org/u/linger)\ **Post date:** [October 9, 2017, 7:45am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/5 "2017-10-09T07:45:02Z")
server A(ip is:116.196.112.157 centos 6.7) : [http://www.soft169.xyz:8080/index.html](http://www.soft169.xyz:8080/index.html) server B(install certbot), **I want to get a cert for domain ‘www.soft169.xyz’ in server B, how can i do?** in B, the cammands is : ./certbot-auto certonly --standalone --email [646524284@qq.com](mailto:646524284@qq.com) -d soft169.xyz when Firewall off response : ![图片](https://global.discourse-cdn.com/letsencrypt/original/3X/c/0/c0db7c793a922411821f886ca0eb819b7a525e1d.png) when firewall on response: ![图片](https://global.discourse-cdn.com/letsencrypt/original/3X/6/8/68ff95d4ee14487989afc4939ab52478554237d0.png) ---
**Author:** ![linger](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/linger/32/16873_2.png) [@linger](https://community.letsencrypt.org/u/linger)\ **Post date:** [October 9, 2017, 7:50am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/6 "2017-10-09T07:50:12Z")
National Day holiday ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [October 9, 2017, 6:58pm UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/7 "2017-10-09T18:58:41Z")
Hi @linger, The method of requesting a certificate that you’re using requires the server to be able to accept inbound connections on port 443, and requires you to run Certbot on the computer that the domain name is pointed to. You can’t use a different port number or run Certbot on a separate computer with this method. Can you run Certbot on server A instead? If not, you might be able to use a different method to get the certificate. ---
**Author:** ![linger](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/linger/32/16873_2.png) [@linger](https://community.letsencrypt.org/u/linger)\ **Post date:** [October 10, 2017, 12:43am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/8 "2017-10-10T00:43:46Z")
Hi @schoen Which other method can I get Let’s Encrypt certificate? my server A have some Service limit,I cannot run Certbot on server A instead. ---
**Author:** ![linger](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/linger/32/16873_2.png) [@linger](https://community.letsencrypt.org/u/linger)\ **Post date:** [October 10, 2017, 12:59am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/9 "2017-10-10T00:59:38Z")
Which other method can i get,authenticate and renewal a Let’s Encrypt certificate in server B? ---
**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\ **Post date:** [October 10, 2017, 2:43am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/10 "2017-10-10T02:43:07Z")
If you can create an HTTP 301 redirect on server A from [http://www.soft169.xyz/.well-known/acme-challenge/](http://www.soft169.xyz/.well-known/acme-challenge/) to server B, that is one approach. It does not have to affect any other directories. This indicates to the certificate authority that server B is allowed to answer ACME HTTP-01 challenges on behalf of server A. The other alternative is if your DNS provider has an API which would let you automatically create DNS TXT records in your DNS zone. If so, you can run an ACME client on any machine and use the DNS provider API from there to create TXT records specified by the certificate authority to satisfy the ACME DNS-01 challenge method. There are also other alternatives if you can create files (at specified locations) on server A, either manually or via a protocol like SCP or SFTP. ---
**Author:** ![linger](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/linger/32/16873_2.png) [@linger](https://community.letsencrypt.org/u/linger)\ **Post date:** [October 10, 2017, 2:48am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/11 "2017-10-10T02:48:28Z")
thanks,schoen. let me try ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [November 9, 2017, 2:48am UTC](https://community.letsencrypt.org/t/which-method-can-i-get-let-s-encrypt-certificate-on-server-a-the-certificate-use-for-server-b/43261/12 "2017-11-09T02:48:38Z")
Closed on November 9, 2017, 2:48am UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.