You need three dns records on your domain dashboard, api, and broker For each record you need to set an A record (IPv4) and possibly an AAAA Record (IPv6) On your Server that is pointed to by the Records you need Ports 80 and 443 open Letsencrypt tries to access a specific file over port 80 on your server, if the access succeeds, your certificate is issued