Automatic Cloudflare certs stopped working for root of domain but still work on sub domains

[Mohammed90 (Mohammed Al Sahaf)]

@headband

I do not have that subdomain, it looks like that’s supposed to be a subdomain of letsencrypt.org? That could also just be something I don’t understand.

This is a temporary subdomain which Caddy creates to prove to Let’s Encrypt the server requesting the certificate controls the domain.

@headband

unexpected response code 'NOTIMP' for _acme-challenge.queasy.cc

This seems to be an issue with the DNS resolver is your system. Another user had similar issue here.

NOTIMP reponse to Route53 ACME challenge

That’s weird. Your DNS resolver doesn’t support a query for an SOA record it seems. You can override the resolvers with resolvers 1.1.1.1 (right after your dns config) to have it use Cloudflare’s DNS servers instead of your own local resolvers to do propagation checks.