Issue Letsencrypt shows second email entry

[Polli]

Server operating system version

Debian 12.11

Plesk version and microupdate number

18.0.70 #2

Hi everyone

I now have a second entry in my SSL overview. The certificate is trying to store an additional email domain here. But this does not exist. I had these entries on the old server, but not on the new one. I have attached the log entries, as well as my DNS details. How can I fix this error?

The details are listed in the attached screenshots.

Thanks for your help.

 

[afuego]

You need to add A record for mail.vlowee-vanlife.de pointing to your server's IP address (85.25.46.232)

 

[Polli]

You need to add A record for mail.vlowee-vanlife.de pointing to your server's IP address (85.25.46.232)

I allready have an MX entry and it was working for a long time. Now this new entry appears for no reason.

 

[scsa20]

Although the way you have your MX record will work, Plesk looks for mail.domain.tld when it comes to email configurations and when issuing certificates. So to make everything happy with SSL you will need an A record for mail.domain.tld. If you don't want to do that, that's fine as well, but you will continue to see some errors like that but can be ignored (even more so if you're getting a wild card certificate issued).

 

[Kaspar]

I allready have an MX entry and it was working for a long time. Now this new entry appears for no reason.

It not about the MX record(s), but about an A record (and AAAA record if you use IPv6 too) for the mail host. As @afuego pointed out, a mail.<your domain> record is missing on your domain. Hence the error in the log.

On the newest update of the SSL it! extension the feature got introduced to also add the mail host name as a SAN to the certificate for a domain.

 

[Polli]

I don't want the mail.domain.tld entry. My mailserver works fine. The entry means that i can't use DNSSEC. Apart from that, DANE doesn't work with or without the addition of mail. in the domain. Plesk should improve this. So how can I remove the entry from the letsencrypt certificate? And again: I don't want the entry mail.domain.tld because it causes problems with the mail server. This is due to my hidden primary DNS. It seems to work with Plesk only this way.