HTTP-01 explained

Serving a file on port 80 is the oldest ACME challenge. It is simple when you already terminate HTTP on the name.

The URL

http://{hostname}/.well-known/acme-challenge/{token} must return the key authorization. TLS is not required for the challenge itself.