Resolved Lets Encrypt not issuing certs for subdomains

[mendip_discovery]

Server operating system version

Debian 11.11

Plesk version and microupdate number

Plesk Obsidian v18.0.64_build1800241008.13

I use cloudflare for my DNS but its not connected in plesk. Ages ago I used this to get around the issue of the dns etc. Its worked fine until recently.

For some reason my main domain updates fine, and I have ticked include subdomains etc. but for some reason the subdomains are not inlduded in that and they have thier own certificate and that wont update.

I get the,

Could not issue an SSL/TLS certificate for sub.example.co.uk
Details
Could not request a Let's Encrypt SSL/TLS certificate for sub.example.co.uk.

Go to http://sub.example.co.uk/.well-known/acme-challenge/25465asdas65d46as5d4as2d1a3sa65

and сheck if the authorization token is available.

If it is, try to request the certificate again. If the token is not available, there may be an issue with your DNS configuration.

Your domain in Plesk is hosted on the IP address(es): IP4 IP6, but the DNS challenge used another IP: cloudflare.

Make sure that the IP address(es) specified in the domain's DNS zone match the IP address(es) the domain is hosted on.

 

[Sebahat.hadzhi]

Hey, @mendip_discovery, please try the following:

1. Exclude (http://sub.example.co.uk/.well-known/acme-challenge/*) from Cloudflare's caching.
2. Clear your Cloudflare cache.
3. (In case captcha is enabled) Temporarily disable captcha for the domain.
4. Issue/renew Let's encrypt certificate: Log in to Plesk > Domains > example.com > SSL/TLS Certificates > Install/Reissue Certificate.

Please let us know if the issue continues.

 

[mendip_discovery]

It turns out it is the Cloudflare Bot Fight mode that was causing this issue