Home
Support Forums

SniCertificate::CertificateInvalidError: Unable to verify challenge for

Hello

The website (default subdomain: pauseequilibre.netlify.app) is linked by 4 different domains managed with OVH:

Just received an email telling me:

Failed to renew TLS certificate for a-l-equilibre.fr

The TLS certificate for a-l-equilibre.fr will expire on Sep 01, 2021. We tried to renew it, but got this error message:

SniCertificate::CertificateInvalidError: Unable to verify challenge for pauseequilibre.com: During secondary validation: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.pauseequilibre.com - check that a DNS record exists for this domain

I didn’t change anything since 5 month,
How to fix this ?

Thanks

Hi @mahieuseverine,

You have an incorrect domain in your alias list that’s causing problems: pauseequilibre.com. Since that domain is not pointing to Netlify, it caused certificate issuing errors and now, your domain has been rate limited by Lets Encrypt. The effect will persist for a week and we can only retry after that.

Till then, you need to either remove the domain from the alias list or correct the DNS.