Let’s Encrypt certificate installation/renewal failed for domain hosted on Plesk: access domain is enabled

Symptoms

• Let’s Encrypt certificate for example.com, hosted on Plesk installation/renewal failed with the next message in /var/log/plesk/panel.log:

  Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/3511652054.
  Details:
  Type: urn:ietf:params:acme:error:unauthorized
  Status: 403
  Detail: Invalid response from https://example.com/.well-known/acme-challenge/AXXqjE29vqJSCj1Ywb1F0n46z7Hm8eHKduB1oaO3jSg

Cause

Plesk access domain set to the hostname used for hosting websites:

# plesk db “select * from misc where param like ‘access-domain%'”
+———————–+————-+
| param                 | val         |
+———————–+————-+
| access-domain-enabled | true        |
| access-domain-name    | example.com |
+———————–+————-+

Resolution

1. Connect to the server via SSH

2. Disable access domain or set it to the hostname not used for hosting websites.

   • To disable Plesk access domain run the following command as ‘root’

     # plesk bin admin –disable-access-domain

   • To set Plesk access domain to the hostname not used for hosting websites.

     # plesk bin admin –enable-access-domain ‘domain.tld’