The domain www.itanhaem.sp.gov.br is being served through Cloudflare CDN. Any Let's Encrypt certificate installed on the origin server will only encrypt traffic between the server and Cloudflare. It is strongly recommended that the SSL option 'Full SSL (strict)' be enabled.
https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-
CAA records control authorization for certificate authorities to issue certificates for a domain
itanhaem.sp.gov.br. 0 IN CAA 0 issue "digicert.com; cansignhttpexchanges=yes"
itanhaem.sp.gov.br. 0 IN CAA 0 issue "letsencrypt.org"
itanhaem.sp.gov.br. 0 IN CAA 0 issue "pki.goog; cansignhttpexchanges=yes"
itanhaem.sp.gov.br. 0 IN CAA 0 issue "sectigo.com"
itanhaem.sp.gov.br. 0 IN CAA 0 issue "comodoca.com"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "comodoca.com"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "digicert.com; cansignhttpexchanges=yes"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "letsencrypt.org"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "pki.goog; cansignhttpexchanges=yes"
itanhaem.sp.gov.br. 0 IN CAA 0 issuewild "sectigo.com"
Requests made to the domain
Request to: www.itanhaem.sp.gov.br/2606:4700:3031::6815:5ff5, Result: [Address=2606:4700:3031::6815:5ff5,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3031::6815:5ff5)
@0ms: Dialing 2606:4700:3031::6815:5ff5
@321ms: Server response: HTTP 301 Moved Permanently
@321ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@321ms: Dialing 2606:4700:3031::6815:5ff5
@758ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/2606:4700:3030::ac43:95c0, Result: [Address=2606:4700:3030::ac43:95c0,Address Type=IPv6,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 2606:4700:3030::ac43:95c0)
@0ms: Dialing 2606:4700:3030::ac43:95c0
@353ms: Server response: HTTP 301 Moved Permanently
@353ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@353ms: Dialing 2606:4700:3030::ac43:95c0
@784ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/104.21.95.245, Result: [Address=104.21.95.245,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 104.21.95.245)
@0ms: Dialing 104.21.95.245
@295ms: Server response: HTTP 301 Moved Permanently
@295ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@296ms: Dialing 104.21.95.245
@749ms: Server response: HTTP 404 Not Found
Request to: www.itanhaem.sp.gov.br/172.67.149.192, Result: [Address=172.67.149.192,Address Type=IPv4,Server=cloudflare,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test (using initial IP 172.67.149.192)
@0ms: Dialing 172.67.149.192
@289ms: Server response: HTTP 301 Moved Permanently
@289ms: Received redirect to https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/letsdebug-test
@290ms: Dialing 172.67.149.192
@742ms: Server response: HTTP 404 Not Found
A and AAAA records found for this domain
www.itanhaem.sp.gov.br. 0 IN A 104.21.95.245
www.itanhaem.sp.gov.br. 0 IN A 172.67.149.192
www.itanhaem.sp.gov.br. 0 IN AAAA 2606:4700:3031::6815:5ff5
www.itanhaem.sp.gov.br. 0 IN AAAA 2606:4700:3030::ac43:95c0
Challenge update failures for www.itanhaem.sp.gov.br in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/7128913823
acme: error code 403 "urn:ietf:params:acme:error:unauthorized": 2606:4700:3031::6815:5ff5: Invalid response from https://www.itanhaem.sp.gov.br/.well-known/acme-challenge/Vijv8lZGmti6X7C1EZFG6c_DxFrLOBhIDS62Oxz05CM: 404
The IANA public suffix is the TLD of the Registered Domain
The TLD for www.itanhaem.sp.gov.br is: sp.gov.br