There are multiple options to work around this problem:
- Use a DNS-based challenge like
DNS-01. This requires you to create a TXT record to demonstrate domain ownership. - Redirect validation requests from the old server to the new server for the period of your migration (i.e. a 301 redirect from
http://example.com/.well-known/acme-challenge/*tohttp://new.example.com/.well-known/acme-challenge/*) - If your old host already has a working
certbotinstallation, justrsyncthe existing/etc/letsencryptdirectory to your new host, and then test renewal once the migration is complete.