Let's Encrypt certificates to be generated need the domain to point to our DNS or our hosting. Please read our article on the subject here. If your domain is currently targeting CloudFlare servers, you may need to take a few additional steps to be able to correctly generate the first Let's Encrypt certificate.
How to solve the Let's Encrypt certificate generation problem
- Login to the CloudFlare service.
- Make sure that the main A record of the domain is properly directed to the correct IP address.
- Disable proxing of traffic (the cloud must be gray).
After these steps we should be able to generate the correct Let's Encrypt certificate. If everything goes well, you will be able to enable Cloudflare traffic proxy again.