The certificate is not trusted because it is self-signed. Error during secondary validation. about acme-companion

[buchdag]

At first glance it looks like a genuine network error between the Let's Encrypt secondary validation servers and your host, because you don't appear to have misconfigurations and you see the request from the primary validation being correctly answered at the end of the log.

https://community.letsencrypt.org/t/during-secondary-validation-dns-problem-query-timed-out/188165
https://community.letsencrypt.org/t/renew-certificate-failed-due-to-secondary-validation/178643/2
https://community.letsencrypt.org/t/renew-certificate-failed-due-to-secondary-validation-again/185301

Seems to be plenty of threads related to failing secondary validations.

[prairietree]

Hi,

After a bunch of testing it seem like it was a genuine network issue. I believe it is working now that I turned off Country Restrictions on the network. I am trying to figure out what countries I need to allow. Thanks for the above links. That helped.