I’m an absolutely noob…and I’m having a devil of a time trying to renew my security certificate.
I’ve followed most of the recommendations here:
and have had no luck. I consistently get the following error (the certificate is for chat.dhilab.org. I could really use some help.
Attempting to renew cert (chat.dhilab.org) from /etc/letsencrypt/renewal/chat.dhilab.org.conf produced an unexpected error: Failed authorization procedure. www.chat.dhilab.org (http-01): urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.chat.dhilab.org - check that a DNS record exists for this domain. Skipping. All renewal attempts failed. The following certs could not be renewed: /etc/letsencrypt/live/chat.dhilab.org/fullchain.pem (failure)
The following certs are not due for renewal yet: /etc/letsencrypt/live/chat.dhilab.org-0001/fullchain.pem expires on 2021-11-13 (skipped) All renewal attempts failed. The following certs could not be renewed: /etc/letsencrypt/live/chat.dhilab.org/fullchain.pem (failure)
1 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
-
The following errors were reported by the server:
Domain: www.chat.dhilab.org Type: None Detail: DNS problem: NXDOMAIN looking up A for www.chat.dhilab.org
- check that a DNS record exists for this domain
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Accepted Answer
Hi there @watrall,
I’ve just checked your DNS settings using this tool here:
https://www.digitalocean.com/community/tools/dns
And it looks like that you do not have a DNS record for your www version of chat.dhilab.org.
There is an A record for chat.dhilab.org but not www.chat.dhilab.org.
What you need to do is to add an A record for the www version to point to your Droplet’s IP address. Or alternatively, you could add a CNAME record for your www version to point to chat.dhilab.org.
Once you add the record you could again run the renewal command.
Let me know how it goes! Regards, Bobby
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Start building today
From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.
