Setting up LetsEncrypt certificate with Static IP

Hey,
In my office we have a static IP address - I have set up sip.mydomain.com in cloudflare to direct to that ip address.

In the certificate management I’ve tried:

New Certificate
Generate Let’s Encrypt Certificate
Certificate Host Name: sip.mydomain.com
my email
UK
Suffolk
No Alternative names
Challenge over http (port 80)

but i then get this error:

LetsEncrypt Generation Failure

Self test error: Pest_Curl_Exec - Connection timed out after 5000 milliseconds

  • Does DNS for sip.mydomain.com resolve correctly? Local DNS result: correct external ip, External DNS result: correct external ip
  • The LetsEncrypt Service is listening on port disabled. Using a custom port other than 80 is not officially supported. The LetsEncrypt servers only send challenge queries to port 80. Certificate requests will fail unless your network redirects incoming port 80 requests to port disabled.
Processing: sip.mydomain.com, Local IP: correct external ip, Public IP: correct external ip
Self test: trying http://sip.mydomain.com/.freepbx-known/31406496002794663ef1bf6a9528a01e
Self test error: Pest_Curl_Exec - Connection timed out after 5000 milliseconds

Any ideas how I can sort this?

If this is on premise in your office, have you forwarded port 80 in your firewall/router?