I have the same problem. According to the manual https://developer.apple.com/documentation/apple_pay_on_the_web/maintaining_your_environment > Make sure that the specified URL you originally used when validating the merchant domain is accessible to Apple servers listed in Allow Apple IP Addresses for Domain Verification. The URL may be similar to https://yourdomain.com/.well-known/apple-developer-merchantid-domain-association. I am sure that Apple’s IP is not blocked, and Let's Encrypt SSL has automatically renew before expiring. But in access logs cannot be found these URL https://mydomain.com/.well-known/apple-developer-merchantid-domain-association or https://mydomain.com/.well -known/apple-developer-merchantid-domain-association.txt What is wrong with Apple's automatic verification?