Workarounds to install LE prior to DNS change

There are multiple options to work around this problem:

  • Use a DNS-based challenge like DNS-01. This requires you to create a TXT record to demonstrate domain ownership.
  • Redirect validation requests from the old server to the new server for the period of your migration (i.e. a 301 redirect from http://example.com/.well-known/acme-challenge/* to http://new.example.com/.well-known/acme-challenge/*)
  • If your old host already has a working certbot installation, just rsync the existing /etc/letsencrypt directory to your new host, and then test renewal once the migration is complete.