Let's Encrypt certificate installation/renewal failed for domain hosted on Plesk: access domain is enabled

Symptoms

• Let's Encrypt certificate for example.com, hosted on Plesk installation/renewal failed with the next message in /var/log/plesk/panel.log on Linux or %plesk_dir%\Admin\Logs\php_error.log on Windows:
  

  CONFIG_TEXT: Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/3511652054.
  Details:
  Type: urn:ietf:params:acme:error:unauthorized
  Status: 403
  Detail: Invalid response from https://example.com/.well-known/acme-challenge/AXXqjE29vqJSCj1Ywb1F0n46z7Hm8eHKduB1oaO3jSg

Cause

Plesk access domain set to the hostname used for hosting websites:

# plesk db "select * from misc where param like 'access-domain%'"
+-----------------------+-------------+
| param                 | val         |
+-----------------------+-------------+
| access-domain-enabled | true        |
| access-domain-name    | example.com |
+-----------------------+-------------+

Resolution

1. Connect to the server via SSH / RDP

2. Disable access domain or set it to the hostname not used for hosting websites. The commands should be executed on behalf of a privileged user - root in Linux and Administrator in Windows.

   • To disable Plesk access domain run the following command:

     # plesk bin admin --disable-access-domain

   • To set Plesk access domain to the hostname not used for hosting websites:

     # plesk bin admin --enable-access-domain 'domain.tld'