A test authorization for www.itanhaem.sp.gov.br to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
DNS problem: query timed out looking up A for www.itanhaem.sp.gov.br; DNS problem: query timed out looking up AAAA for www.itanhaem.sp.gov.br
The domain www.itanhaem.sp.gov.br is being served through Cloudflare CDN. Any Let's Encrypt certificate installed on the origin server will only encrypt traffic between the server and Cloudflare. It is strongly recommended that the SSL option 'Full SSL (strict)' be enabled.
https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-
Requests made to the domain
Request to: www.itanhaem.sp.gov.br/2606:4700:3031::6815:5ff5, Result: [Address=2606:4700:3031::6815:5ff5,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3031::6815:5ff5)
@0ms: Dialing 2606:4700:3031::6815:5ff5
@318ms: Server response: HTTP 301 Moved Permanently
@318ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@318ms: Dialing 2606:4700:3031::6815:5ff5
@780ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/2606:4700:3030::ac43:95c0, Result: [Address=2606:4700:3030::ac43:95c0,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3030::ac43:95c0)
@0ms: Dialing 2606:4700:3030::ac43:95c0
@295ms: Server response: HTTP 301 Moved Permanently
@295ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@295ms: Dialing 2606:4700:3030::ac43:95c0
@748ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/172.67.149.192, Result: [Address=172.67.149.192,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 172.67.149.192)
@0ms: Dialing 172.67.149.192
@312ms: Server response: HTTP 301 Moved Permanently
@312ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@312ms: Dialing 172.67.149.192
@768ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/104.21.95.245, Result: [Address=104.21.95.245,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 104.21.95.245)
@0ms: Dialing 104.21.95.245
@310ms: Server response: HTTP 301 Moved Permanently
@310ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@310ms: Dialing 104.21.95.245
@478ms: Server response: HTTP 404 Not Found
A and AAAA records found for this domain
www.itanhaem.sp.gov.br. 0 IN A 172.67.149.192
www.itanhaem.sp.gov.br. 0 IN A 104.21.95.245
www.itanhaem.sp.gov.br. 0 IN AAAA 2606:4700:3031::6815:5ff5
www.itanhaem.sp.gov.br. 0 IN AAAA 2606:4700:3030::ac43:95c0
Challenge update failures for www.itanhaem.sp.gov.br in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/7032322863
acme: error code 400 "urn:ietf:params:acme:error:dns": DNS problem: query timed out looking up A for www.itanhaem.sp.gov.br; DNS problem: query timed out looking up AAAA for www.itanhaem.sp.gov.br
The IANA public suffix is the TLD of the Registered Domain
The TLD for www.itanhaem.sp.gov.br is: sp.gov.br
2 Certificates contributing to rate limits for this domain
Serial: 277435723136497223830687816013227894311335
NotBefore: 2023-02-01 16:12:38 +0000 UTC
Names: [mail.itanhaem.sp.gov.br]
Serial: 416398350941500433693207531594761620805185
NotBefore: 2023-02-01 16:10:16 +0000 UTC
Names: [wsconsig.itanhaem.sp.gov.br]