Can't get ssl Let's Encrypt?

Question

Domain Name System

This error occurs when getting ssl Let's Encrypt -> Domain ownership check failed
return code:400

Details:DNS problem: SERVFAIL looking up CAA for (domain name) - the domain's nameservers may be malfunctioning

What causes this error and how to solve it ?

After some time, sometimes a notification is shown that you need to make a TXT record, but this record already exists

Answer 1

I solved this problem. In ispmanager, you need to go to domain names and add your domain there on behalf of the admin

Answer 2

The content of the DNS TXT verification record is randomly generated each time.
Therefore, you need to start certbot, copy the DNS record without interrupting the execution of certbot, update it in DNS, wait until this record is resolved with the updated content on the server where certbot is running - and only after that continue checking.

Answer 3

the domain's nameservers may be malfunctioning

Make sure this TXT record is visible "on the internet" - https://dnschecker.org/
https://mxtoolbox.com/dnscheck.aspx