Let's Debug

Test result for da-demo.xyz using http-01

A test authorization for da-demo.xyz to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
DNS problem: SERVFAIL looking up A for da-demo.xyz
Debug
Requests made to the domain
Request to: da-demo.xyz/8.9.37.209, Result: [Address=8.9.37.209,Address Type=IPv4,Server=nginx,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://da-demo.xyz/.well-known/acme-challenge/letsdebug-test (using initial IP 8.9.37.209)
@0ms: Dialing 8.9.37.209
@3ms: Server response: HTTP 301 Moved Permanently
@3ms: Received redirect to https://da-demo.xyz/.well-known/acme-challenge/letsdebug-test
@3ms: Dialing 8.9.37.209
@23ms: Server response: HTTP 404 Not Found

Debug
A and AAAA records found for this domain
da-demo.xyz. 0 IN A 8.9.37.209
Challenge update failures for da-demo.xyz in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/67765840
acme: error code 400 "urn:ietf:params:acme:error:dns": DNS problem: SERVFAIL looking up A for da-demo.xyz
Debug
The IANA public suffix is the TLD of the Registered Domain
The TLD for da-demo.xyz is: xyz
Debug
The current status.io status for Let's Encrypt
Operational

Submitted Dec 31 04:14:50 2019. Sat in queue for 1ms. Completed in 2s. Hide verbose information.