Unable to issue SSL certificate for a domain: error 400

Symptoms

• Unable to issue an SSL certificate for a domain with any of the following errors:

  CONFIG_TEXT: Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/6955924289. Details: Type: urn:ietf:params:acme:error:connection Status: 400 Detail: Fetching http://www.acme-challenge.localhost/.well-known/acme-challenge/VZ0HZWatiUiZ_qdbOF0P8qWVhkUx44frNXXoQFsX79Q: Invalid hostname in redirect target, must end in IANA registered TLD

  CONFIG_TEXT: Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/6658802176.
  Details:
  Type: urn:ietf:params:acme:error:unauthorized
  Status: 403

• Upon opening https://example.com/.well-known/acme-challenge/test.txt in the browser the following message is shown:

  PLESK_INFO: 404 - File or directory not found.
  Requested URL http://acme-challenge.localhost:80/test.txt
  Physical Path %plesk_dir%\var\acme-challenge\test.txt

• Common challenge directory feature of SSL It extension is enabled:

  C:\> plesk ext sslit --common-challenge-dir -info
  - Available: true
  - Enabled: true

Cause

Broken common challenge directory feature of SSL It extension.

Resolution

1. Connect to the server via RDP.

2. Disable common challenge directory by executing the command:

   C:\> plesk ext sslit --common-challenge-dir -disable

3. Issue certificate in Domains > example.com > SSL/TLS Certificates

4. Re-enable common challenge directory by executing the command:

   C:\> plesk ext sslit --common-challenge-dir -enable