Let's Encrypt certificate installation/renewal failed for domain hosted on Plesk: access domain is enabled

Symptoms

Let's Encrypt certificate for example.com, hosted on Plesk installation/renewal failed

CONFIG_TEXT:
Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/3511652054.
Details:
Type: urn:ietf:params:acme:error:unauthorized
Status: 403
Detail: Invalid response from https://example.com/.well-known/acme-challenge/AXXqjE29vqJSCj1Ywb1F0n46z7Hm8eHKduB1oaO3jSg

Cause

Plesk access domain set to the hostname used for hosting websites:

# plesk db "select * from misc where param like 'access-domain%'"
+-----------------------+-------------+
| param                 | val         |
+-----------------------+-------------+
| access-domain-enabled | true        |
| access-domain-name    | example.com |
+-----------------------+-------------+

Resolution

1. Connect to the server via SSH

2. Disable access domain or set it to the hostname not used for hosting websites.

   • To disable Plesk access domain run the following command as 'root'

     # plesk bin admin --disable-access-domain

   • To set Plesk access domain to the hostname not used for hosting websites.

     # plesk bin admin --enable-access-domain 'domain.tld'