Let's Debug

Test result for sigla.sema.ma.gov.br using http-01

A fatal issue occurred during the DNS lookup process for sigla.sema.ma.gov.br/A.
DNS response for sigla.sema.ma.gov.br had fatal DNSSEC issues: validation failure <sigla.sema.ma.gov.br. A IN>: No DNSKEY record from 200.160.0.10 for key ma.gov.br. while building chain of trust
A fatal issue occurred during the DNS lookup process for sigla.sema.ma.gov.br/AAAA.
DNS response for sigla.sema.ma.gov.br had fatal DNSSEC issues: validation failure <sigla.sema.ma.gov.br. AAAA IN>: No DNSKEY record for key ma.gov.br. while building chain of trust
A fatal issue occurred during the DNS lookup process for sigla.sema.ma.gov.br/CAA.
DNS response for sigla.sema.ma.gov.br had fatal DNSSEC issues: validation failure <sigla.sema.ma.gov.br. CAA IN>: No DNSKEY record from 2001:12f8:c::10 for key ma.gov.br. while building chain of trust
Fatal
No valid A or AAAA records could be ultimately resolved for sigla.sema.ma.gov.br. This means that Let's Encrypt would not be able to to connect to your domain to perform HTTP validation, since it would not know where to connect to.
No A or AAAA records found.
Debug
The IANA public suffix is the TLD of the Registered Domain
The TLD for sigla.sema.ma.gov.br is: ma.gov.br
Debug
The current status.io status for Let's Encrypt
Operational

Submitted Jan 1 05:35:06 2019. Sat in queue for 2ms. Completed in 29m19s. Hide verbose information.