Two domains error update ssl dns

i have 2 domains: myexample.com and my-example.com.
I get global API key end write in .ini file.
First creating - success.
Renew - fail.
Why?
[email protected]:~# certbot certonly --dns-cloudflare --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini -d myexample.com -d *.myexample.com -d my-example.com -d *.my-example.com && certbot --apache -d myexample.com -d *.myexample.com -d my-example.com -d *.my-example.com
Success, work.

[email protected]:~# certbot renew --dry-run
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/myexample.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Cert not due for renewal, but simulating renewal for dry run
Plugins selected: Authenticator dns-cloudflare, Installer None
Renewing an existing certificate
Performing the following challenges:
dns-01 challenge for my-example.com
dns-01 challenge for myexample.com
dns-01 challenge for my-example.com
dns-01 challenge for myexample.com
Waiting 10 seconds for DNS changes to propagate
Waiting for verification...
Challenge failed for domain my-example.com
dns-01 challenge for my-example.com
Cleaning up challenges
Attempting to renew cert (myexample.com) from /etc/letsencrypt/renewal/myexample.com.conf produced an unexpected error: Some challenges have failed.. Skipping.
All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/myexample.com/fullchain.pem (failure)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates below have not been saved.)

All renewal attempts failed. The following certs could not be renewed:
  /etc/letsencrypt/live/myexample.com/fullchain.pem (failure)
** DRY RUN: simulating 'certexample renew' close to cert expiry
**          (The test certificates above have not been saved.)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1 renew failure(s), 0 parse failure(s)

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: my-example.com
   Type:   unauthorized
   Detail: Incorrect TXT record
   "ndWfKJ9Vnc9zqi13nA2AQ_nkKkIPIKxw4uwsDITe_M4" found at
   _acme-challenge.my-example.com

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.
[email protected]:~#

Error.
How fix?

I have not tried this method from the command line, but does it still fail if you only try to renew on a single domain instead of both at the same time?

This topic was automatically closed after 30 days. New replies are no longer allowed.