I followed this tutorial https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-20-04 and when I write this commandsudo certbot --nginx -d example.com -d www.example.com with my own domain, I get this error Challenge failed for domain goldenpay.clickChallenge failed for domain www.goldenpay.clickhttp-01 challenge for goldenpay.clickhttp-01 challenge for www.goldenpay.clickCleaning up challengesSome challenges have failed. IMPORTANT NOTES: The following errors were reported by the server: Domain: goldenpay.clickType: dnsDetail: DNS problem: SERVFAIL looking up A for goldenpay.click -the domain’s nameservers may be malfunctioning; DNS problem:SERVFAIL looking up AAAA for goldenpay.click - the domain’snameservers may be malfunctioning Domain: www.goldenpay.clickType: dnsDetail: DNS problem: SERVFAIL looking up CAA for goldenpay.click -the domain’s nameservers may be malfunctioning

DigitalOcean

- Community
- DigitalOcean
- Community
- DigitalOcean

Question

Hi, I'm having issues setting up ssl certificate on digital ocean.

Posted on February 15, 2022

Ubuntu 20.04

DNS

By ehisdanomuokhonlen

I followed this tutorial https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-20-04

and when I write this command sudo certbot --nginx -d example.com -d www.example.com with my own domain, I get this error

Challenge failed for domain goldenpay.click Challenge failed for domain www.goldenpay.click http-01 challenge for goldenpay.click http-01 challenge for www.goldenpay.click Cleaning up challenges Some challenges have failed.

IMPORTANT NOTES:

The following errors were reported by the server:

Domain: goldenpay.click Type: dns Detail: DNS problem: SERVFAIL looking up A for goldenpay.click - the domain’s nameservers may be malfunctioning; DNS problem: SERVFAIL looking up AAAA for goldenpay.click - the domain’s nameservers may be malfunctioning

Domain: www.goldenpay.click Type: dns Detail: DNS problem: SERVFAIL looking up CAA for goldenpay.click - the domain’s nameservers may be malfunctioning

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Bobby

July 15, 2022

Hi there,

Indeed, in order for Let’s Encrypt to be able to validate your domain name, you need to first change your A record to point to the server’s IP address.

You can follow the steps on how to do that here:

https://docs.digitalocean.com/products/networking/dns/how-to/manage-records/

Best,

Bobby