I followed this post. cf) DNS-01 Challenge: https://letsencrypt.org/de/docs/challenge-types/. Check the certificate certbot certificates Create a new certificate Prepare E-mail address for notifications from Let’s Encrypt (in followin case firstname.lastname@example.org). You should be ables to change the DNS records (TXT records) of the domain. Create the certificate certbot --manual --preferred-challenges dns certonly \ -d yourwebsite.com \ -d www.yourwebsite.com \ # SAN in the certificate Here is the sample messages.