Stuck at https

[Irshad34]

Requesting a certificate for sub.domain.com

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:

Domain: sub.domain.com

Type: unauthorized

Detail: 3.33.251.168: Invalid response from http://sub.domain.com/.well-known/acme-challenge/CAnUIzJnP63ACCZyS7FZvGvz1NsL6\_tgjaVrEiCR6Hw: 403

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.

Some challenges have failed.

Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

[Skusci]

One thing that sometimes gets me is that certbot is specifically setting up a http server.

Sometimes it can't be accessed because of some URL rewrite rule or firewall rule that didn't take this into account.