Cannot renew wildcard Let’s Encrypt certificate: TXT record could not be created automatically.

Symptoms

• External DNS is used for the domain example.com.

• Cannot renew wildcard certificate with the following messages received by Plesk administrator:

  Cannot renew LE: Skip wildcard certificate renewal for the domain 'example.com'. TXT record could not be created automatically. Try to renew domain certificate manually.

Cause

TXT record has not been added or updated on domain example.com on external DNS side: when external DNS is used it is required to add TXT record manually each time to re-issue Let's Encrypt certificate.

Resolution

1. Add TXT record on external DNS side
2. Log into Plesk
3. Re-issue certificate in Domains > example.com > SSL/TLS Certificates.