# ERROR while generating SSL certificate for Observation k8 cluster

**URL:** <https://community.mosip.io/t/error-while-generating-ssl-certificate-for-observation-k8-cluster/2155>\
**Category:** Support\
**Tags:** deployment\_comp\
**Created:** [July 11, 2025, 3:19am UTC](https://community.mosip.io/t/error-while-generating-ssl-certificate-for-observation-k8-cluster/2155 "2025-07-11T03:19:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jaimin](https://avatars.discourse-cdn.com/v4/letter/j/59ef9b/32.png) [@jaimin](https://community.mosip.io/u/jaimin)\
**Post date:** [July 11, 2025, 3:19am UTC](https://community.mosip.io/t/error-while-generating-ssl-certificate-for-observation-k8-cluster/2155/1 "2025-07-11T03:19:47Z")

</div>

To generate SSL Certificate for observation k8 cluster, i’m executing following command  
`sudo certbot certonly --agree-tos --manual --preferred-challenges=dns -d *.testbox.mosip.net`

It’s giving following ERROR:

Saving debug log to /var/log/letsencrypt/letsencrypt.log  
Requesting a certificate for \*.testbox.mosip.net

* * *

Please deploy a DNS TXT record under the name:

\_acme-challenge.testbox.mosip.net.

with the following value:

DheMgtbzUwKJicnpOHhwdePfV-tYgB\_yRR6m6YGLglo

Before continuing, verify the TXT record has been deployed. Depending on the DNS  
provider, this may take some time, from a few seconds to multiple minutes. You can  
check if it has finished deploying with aid of online tools, such as the Google

Look for one or more bolded line(s) below the line ‘;ANSWER’. It should show the  
value(s) you’ve just added.

* * *

Press Enter to Continue

Certbot failed to authenticate some domains (authenticator: manual). The Certificate Authority reported these problems:  
Domain: [testbox.mosip.net](http://testbox.mosip.net)  
Type: dns  
Detail: DNS problem: NXDOMAIN looking up TXT for \_acme-challenge.testbox.mosip.net - check that a DNS record exists for this domain

Hint: The Certificate Authority failed to verify the manually created DNS TXT records. Ensure that you created these in the correct location, or try waiting longer for DNS propagation on the next attempt.

Some challenges have failed.  
Ask for help or search for solutions at [https://community.letsencrypt.org](https://community.letsencrypt.org). See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

Before executing the above command, i executed below one  
`sudo certbot certonly --agree-tos --manual --preferred-challenges=dns -d *.mosip.net`

And `textbox.mosip.net` is part of `*.mosip.net`  
So, I think that is creating the issue, How can I delete TXT record for `*.mosip.net` ?

---

<div class="post-metadata">

**Author:** ![jaimin](https://avatars.discourse-cdn.com/v4/letter/j/59ef9b/32.png) [@jaimin](https://community.mosip.io/u/jaimin)\
**Post date:** [July 11, 2025, 9:23am UTC](https://community.mosip.io/t/error-while-generating-ssl-certificate-for-observation-k8-cluster/2155/2 "2025-07-11T09:23:33Z")

</div>

I missed instruction mentioned by letsencrypt command.  
Issue resolved.

---

<div class="post-metadata">

**Author:** ![svahsek](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/svahsek/32/1098_2.png) [@svahsek](https://community.mosip.io/u/svahsek)\
**Post date:** [July 14, 2025, 8:57am UTC](https://community.mosip.io/t/error-while-generating-ssl-certificate-for-observation-k8-cluster/2155/3 "2025-07-14T08:57:42Z")

</div>

Closed on July 14, 2025, 8:57am UTC