The domain must point to the server The correct DNS A/AAAA records must have been made HTTP must be active (port 80) No old 301/302 redirects should prevent verification There should be no .htaccess block that cuts off /.well-known/acme-challenge/