The key authorization file from the server did not match this challenge

how did I miss it))

Thank you @sahsanu so much!

You are welcome but it isn’t fixed yet.

❯ dig @ns1.example.org example.net +short
198.51.100.1

❯ dig @ns1.example.org example.net ns +short
ns1.example.com.
ns2.example.com.

need time?

once I’ve changed first ns it says Error: bind9 restart failed but in second one it changed well

Ok, now it works fine:

❯ dig @ns1.example.org example.net +short
203.0.113.1

❯ dig @ns1.example.org mail.example.net +short
203.0.113.1

❯ dig @ns1.example.org example.net ns +short
ns1.example.org.
ns2.example.org.

And it returns the right data:

❯ curl -kL example.net/.well-known/acme-challenge/test
test.Mh7kiwDqY3tacPaNvzPZsg2d9Oaoe1CVAQowUvJFQxs

Yes, thank you again very much @sahsanu !