Error finalizing order Rechecking CAA failed. Refer to sub-problems for more information

Question
1

I keep receiving this timeout error when requesting a certificate.

The Let’s Encrypt service did not issue a valid certificate in the time allowed. Failed to finalize certificate order: Error finalizing order :: Rechecking CAA for <mydomainname.org> and 4 more identifiers failed. Refer to sub-problems for more information

Any ideas how to diagnose or fix? This domain is using http authentication if that is helpful.
Also there are no CAA records for my domain, it should not take much time to verify that.

Thanks!

2

Hi, you could try https://letsdebug.net and have a look for recent issues with Let’s Encrypt on community.letsencrypt.org - I’ll also see if other people are reporting the same error.

3

Well, I don’t know what changed, but finally after trying all day, my cert has renewed!
Thanks for all your help, if I figure out what changed, I’ll post it here. I did speak with the person responsible for the DNS, but I don’t know if they changed something. I’m guessing they did…

4

Hi, I’d actually guess Let’s Encrypt are fire fighting as we speak and they probably had timeouts in their infrastructure. Due to their certificate revocation issues they’ll be renewing about 26 million certs right now. Glad you got it resolved.