r/PKI • u/SpecialRoutine4310 • 6d ago

Getting Let’s Encrypt Certificates using RFC2136 on Technitium DNS server Fails

I have public facing Technetium DNS servers resolving hosts. The zones are setup and configured to use Dynamic Updates. Reference:- https://blog.technitium.com/2023/03/how-to-auto-renew-ssl-certificates-with.html

However, it is failing with the following error “ Certbot.errors: Unable to determine base domain for _acme-challenge.<sebat7.com> using names: \[‘_acme-challenge.sebat7.com’ , ‘sebat7.com’ , ‘com’\]

Unable to determine base domain for _acme-challenge.sebat7.com using names : \[‘_acme-challenge.sebat7.com’ , ‘sebat7.com’ , ‘com’\]

I tried Certbot and also Nginx Proxy Manager with the RFC2136 plugins. I need help nor don’t mind paying a consultant to resolve this imperative issue. Any help or recommendation of a consultant will be much appreciated. Thank you.

0 Upvotes

25% Upvoted

2 comments sorted by

1

u/Mike22april 6d ago

Use ACME.sh instead

1

u/SpecialRoutine4310 6d ago

Hi,
I need wildcard certs and I am not sure if ACME.sh handle that and secure. Would mind sharing documents about ACME.sh. Thank you.