DNS-01 renewal fails on missing registrar DNSSEC records
DNS-01 renewal fails because the registrar's DNSSEC records are missing, and the log gives no clear pointer to the cause.
Tier II · Emerging Problems that are still building up.
4 public reports · first reported 11 September 2026 · last reported 11 September 2026
What's going wrong
People using Let's Encrypt with Certbot's DNS-01 challenge report that certificate renewals fail when the domain's registrar DNSSEC records are missing or broken.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 4 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.