My Letsencrypt certificates expired for my freenom kloc.ml domain. I’ve been trying to re-set it up on my system. I would like to use pfsense acme service to reissue the certs.
On the deSEC’s site I see that acme service does populate TXT _acme-challenge record with the API token I provided. However, when the service tries to fetch TXT record back nothing is returned. I used dig command (dig TXT kloc.ml) and I also don’t see anything being return. I’m sure I misconfigured something badly but I have no clue where to start looking. Could you please give me some clues?
Hi ekloc,
Thanks for your message, and welcome to deSEC! 
It seems like kloc.ml is not registered / delegated to deSEC.
Stay secure,
Peter
1 Like
Thank you Peter for your answer. I started looking more into it and it looks that as of July, 2023 the .ml TLD registry was imported into the AGETIC registry :(. Originally it was delegatged to deSEC but I guess that my control over the domain was lost in the process.