# Let's Encrypt error message
**URL:** https://discuss.freedombox.org/t/lets-encrypt-error-message/870
**Category:** Hardware Owners Support
**Created:** [May 5, 2020, 4:53am UTC](https://discuss.freedombox.org/t/lets-encrypt-error-message/870 "2020-05-05T04:53:52Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Nomad](https://discuss.freedombox.org/u/Nomad)
#### Post date: [May 5, 2020, 4:53am UTC](https://discuss.freedombox.org/t/lets-encrypt-error-message/870/1 "2020-05-05T04:53:52Z")
I keep getting this error message for Let’s Encrypt.
Failed to obtain certificate for domain [freedombox.elisa.maria.com](http://freedombox.elisa.maria.com): Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator webroot, Installer None Obtaining a new certificate Performing the following challenges: http-01 challenge for [freedombox.elisa.maria.com](http://freedombox.elisa.maria.com) Using the webroot path /var/www/html for all unmatched domains. Waiting for verification… Cleaning up challenges Failed authorization procedure. [freedombox.elisa.maria.com](http://freedombox.elisa.maria.com) (http-01): urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for [freedombox.elisa.maria.com](http://freedombox.elisa.maria.com) - check that a DNS record exists for this domain
I like to know what I have to do to resolve this? Thank you!
I recived my FBX Pioneer this past weekend, I’m running version 20.7. It’s connected to my Netgear router. I went looking in the router to see if there was a firewall option I could temporary turnoff, thinking that’s the problem?
---
### Author:  [@Sunil](https://discuss.freedombox.org/u/Sunil)
#### Post date: [May 5, 2020, 5:38am UTC](https://discuss.freedombox.org/t/lets-encrypt-error-message/870/2 "2020-05-05T05:38:57Z")
Machines outside your network (including Let’s Encrypt server) are unable to reach your FreedomBox. You need to ensure two things:
- Your ISP provides you with a proper public IP address. You can check your WAN IP address in the router.
- You are necessary forwarding ports (at least 80, 443) in your router from external IP to your FreedomBox address (preferably after making it a static address).
---
### Author:  [@mcr314](https://discuss.freedombox.org/u/mcr314)
#### Post date: [August 16, 2020, 8:44pm UTC](https://discuss.freedombox.org/t/lets-encrypt-error-message/870/3 "2020-08-16T20:44:22Z")
Do we need port-80 to be open for renewals, or just for initial http-01 challenge?