v4v6fail.foo.monkas.xyz has both AAAA (IPv6) and A (IPv4) records. While they both appear to be accessible on the network, we have detected that they produce differing results when sent an ACME HTTP validation request. This may indicate that the IPv4 and IPv6 addresses may unintentionally point to different servers, which would cause validation to fail.
[Address Type=IPv4,Response Code=404,Server=] vs [Address Type=IPv6,Response Code=403,Server=CloudFront]
CAA records control authorization for certificate authorities to issue certificates for a domain
monkas.xyz. 0 IN CAA 0 issue "letsencrypt.org; validation-methods=http-01"
Requests made to the domain
Request to: v4v6fail.foo.monkas.xyz/2600:9000:2033:d800:e:e75:5840:93a1, Result: [Address Type=IPv6,Response Code=403,Server=CloudFront], Issue:
Request to: v4v6fail.foo.monkas.xyz/216.58.200.110, Result: [Address Type=IPv4,Response Code=404,Server=], Issue:
A and AAAA records found for this domain
v4v6fail.foo.monkas.xyz. 0 IN A 216.58.200.110
v4v6fail.foo.monkas.xyz. 0 IN AAAA 2600:9000:2033:d800:e:e75:5840:93a1
Challenge update failures for v4v6fail.foo.monkas.xyz in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/623615
acme: error code 403 "urn:ietf:params:acme:error:unauthorized": Invalid response from http://v4v6fail.foo.monkas.xyz/.well-known/acme-challenge/f1P744pSWv5JpU-pXTnmWStX-H_AUk0DwDgst_3cFso: "<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML><HEAD><META HTTP-EQ"
The IANA public suffix is the TLD of the Registered Domain
The TLD for v4v6fail.foo.monkas.xyz is: xyz
The current status.io status for Let's Encrypt
Operational