Custom domain certificate renewal

Support
1

Hello,

I am having issues with certificate renewal:
**SniCertificate::CertificateNonvalidError: Unable to verify challenge for .d11n.net: No TXT record found at _acme-challenge

Where do I get the token?

Thanks,
Dennis

2

Hi @dennisreimann,

Thanks for reaching out!

I show that a DNS Zone is setup for d11n.net, however it appears to be inactive:

dig d11n.net NS +trace | tail -n 6
d11n.net.      3600  IN NS dns4.p03.nsone.net.
d11n.net.      3600  IN NS dns1.p03.nsone.net.
d11n.net.      3600  IN NS dns3.p03.nsone.net.
d11n.net.      3600  IN NS dns2.p03.nsone.net.
;; Received 123 bytes from 45.87.158.53#53(ns3.inwx.eu) in 111 ms

The last line, Received 123 bytes, shows the name server that answered the above query which is ns3.inwx.eu and not Netlify name servers. The name servers used by Netlify are mentioned here.

If the DNS Zone is not being used you’ll want to delete it as it can cause issues with SSL.

This support guide has steps for how to detect and fix an inactive DNS Zone.

Let us know if you have any questions.

1 Like