HTTPS certificate cannot be renewed

Support
1

Hi,

I have an issue with a website I manage. The SSL/TLS certificate cannot be renewed. The error is SniCertificate::CertificateNonvalidError: Unable to verify challenge for lenfantdeau.fr: 2001:bc8:4::2: Invalid response from http://lenfantdeau.fr/.well-known/acme-challenge/MqSo8F6_edRZaer2sWE7Q3PmwKkLHB-UEurR064PhsM: 404. I had a very similar error last year.

Can you help figure out what are the next steps I should do?

Cheers,

2

Hey @alex-noima

It appears the DNS records for lenfantdeau.fr are not correct, thus the issue. As per the configure external DNS documentation the apex domain requires an ALIAS record pointing to the Netlify load balancer apex-loadbalancer.netlify.com or A record pointing to the load balancer IP 75.2.60.5. Currently the apex points to

% dig lenfantdeau.fr
lenfantdeau.fr.		14400	IN	A	104.198.14.52
lenfantdeau.fr.		14400	IN	A	62.210.16.61

The www subdomain is correctly configured.

1 Like