I followed this post. cf) DNS-01 Challenge: https://letsencrypt.org/de/docs/challenge-types/. Check the certificate certbot certificates Create a new certificate Prepare E-mail address for notifications from Let’s Encrypt (in followin case email@example.com). You should be ables to change the DNS records (TXT records) of the domain. Create the certificate certbot --manual --preferred-challenges dns certonly \ -d yourwebsite.com \ -d www.yourwebsite.com \ # SAN in the certificate Here is the sample messages.