# Client dev **URL:** https://community.letsencrypt.org/c/client-dev/14.md?page=1 [Latest](https://community.letsencrypt.org/latest.md) · [Categories](https://community.letsencrypt.org/categories.md) · [Tags](https://community.letsencrypt.org/tags.md) **Page:** 2 --- ## [My solution for RFC2136 "propogation delay"](https://community.letsencrypt.org/t/my-solution-for-rfc2136-propogation-delay/246120)
**Author:** [@mgun01](https://community.letsencrypt.org/u/mgun01)\ **Replies:** 3\ **Last updated:** [March 26, 2026, 3:17am UTC](https://community.letsencrypt.org/t/my-solution-for-rfc2136-propogation-delay/246120 "2026-03-26T03:17:54Z")
This may not be the correct "category" but I'm not sure where else to put it. I wanted to reply in this thread to offer a solution to this persons issue that works for me, but it seems to be "closed" to further replies. … --- ## [CSR/EKU behavior of free ACME CAs](https://community.letsencrypt.org/t/csr-eku-behavior-of-free-acme-cas/246053)
**Author:** [@rmbolger](https://community.letsencrypt.org/u/rmbolger)\ **Replies:** 6\ **Last updated:** [March 24, 2026, 5:54am UTC](https://community.letsencrypt.org/t/csr-eku-behavior-of-free-acme-cas/246053 "2026-03-24T05:54:02Z")
I had a user submit an issue recently about how Google started rejecting CSRs that include the Client Auth EKU unless the client appends ?client\_auth=true to the end of the directory endpoint. And the directory override … --- ## [Certbot 5.4.0 Release](https://community.letsencrypt.org/t/certbot-5-4-0-release/245809)
**Author:** [@wgreenberg](https://community.letsencrypt.org/u/wgreenberg)\ **Replies:** 1\ **Last updated:** [March 11, 2026, 12:18am UTC](https://community.letsencrypt.org/t/certbot-5-4-0-release/245809 "2026-03-11T00:18:18Z")
Hello! Certbot 5.4.0 has just released. The changelog for the release is here: 5.4.0 - 2026-03-10 Added The webroot plugin now supports IP address issuance. (#10543) Changed certbot-nginx now requires pyparsing\>=3.0.… --- ## [Dns-persist-01 challenge](https://community.letsencrypt.org/t/dns-persist-01-challenge/245569)
**Author:** [@stewe](https://community.letsencrypt.org/u/stewe)\ **Replies:** 19\ **Last updated:** [March 3, 2026, 2:37am UTC](https://community.letsencrypt.org/t/dns-persist-01-challenge/245569 "2026-03-03T02:37:39Z")
Using the dns-persist-01 challenge, I was wondering why the issuer-domain-names array in the challenge object doesn't necessarily have to match the caaIdentities array (from the directory). draft-ietf-acme-dns-persist-0… --- ## [Certbot 5.3.1 Release](https://community.letsencrypt.org/t/certbot-5-3-1-release/245237)
**Author:** [@bmw](https://community.letsencrypt.org/u/bmw)\ **Replies:** 0\ **Last updated:** [February 10, 2026, 4:04am UTC](https://community.letsencrypt.org/t/certbot-5-3-1-release/245237 "2026-02-10T04:04:06Z")
Certbot 5.3.1 has just been released. The changelog for the release is: 5.3.1 - 2026-02-09 Fixed We rebuilt our snaps to include updated versions our dependencies. (#10569) --- ## [\[Brainstorm\] Possible Tutorials to Document for Certbot](https://community.letsencrypt.org/t/brainstorm-possible-tutorials-to-document-for-certbot/244796)
**Author:** [@zoracon](https://community.letsencrypt.org/u/zoracon)\ **Replies:** 8\ **Last updated:** [February 9, 2026, 11:44am UTC](https://community.letsencrypt.org/t/brainstorm-possible-tutorials-to-document-for-certbot/244796 "2026-02-09T11:44:34Z")
Request: This is an open question to Certbot community maintainers, forum sages, etc. who might have thoughts or input. We are looking into possibly adding tutorials or explainers to Certbot documentation. We wanted to … --- ## [CertSage 3.2.1 Release](https://community.letsencrypt.org/t/certsage-3-2-1-release/245195)
**Author:** [@griffin](https://community.letsencrypt.org/u/griffin)\ **Replies:** 0\ **Last updated:** [February 7, 2026, 5:38pm UTC](https://community.letsencrypt.org/t/certsage-3-2-1-release/245195 "2026-02-07T17:38:19Z")
silenced curl in created cron jobs --- ## [Certx.sh - another simple ACME v2 client in POSIX shell](https://community.letsencrypt.org/t/certx-sh-another-simple-acme-v2-client-in-posix-shell/245071)
**Author:** [@lauriro](https://community.letsencrypt.org/u/lauriro)\ **Replies:** 17\ **Last updated:** [February 7, 2026, 10:24am UTC](https://community.letsencrypt.org/t/certx-sh-another-simple-acme-v2-client-in-posix-shell/245071 "2026-02-07T10:24:36Z")
I published certx.sh - another small shell script to get and renew certificates via ACME v2. ~500 lines of POSIX shell with account rollover/deactivation, EAB, and multi-server deployment. Single script, single conf fi… --- ## [Post-Quantum-Crypto Roadmap](https://community.letsencrypt.org/t/post-quantum-crypto-roadmap/245173)
**Author:** [@THST](https://community.letsencrypt.org/u/THST)\ **Replies:** 2\ **Last updated:** [February 6, 2026, 6:56pm UTC](https://community.letsencrypt.org/t/post-quantum-crypto-roadmap/245173 "2026-02-06T18:56:53Z")
Is there already a roadmap regarding PQC? When will new CAs be available that support the NIST‑approved algorithms? Will hybrid certificates be supported? --- ## [CertSage 3.2.0 Release](https://community.letsencrypt.org/t/certsage-3-2-0-release/245180)
**Author:** [@griffin](https://community.letsencrypt.org/u/griffin)\ **Replies:** 0\ **Last updated:** [February 6, 2026, 1:28pm UTC](https://community.letsencrypt.org/t/certsage-3-2-0-release/245180 "2026-02-06T13:28:10Z")
autorenewal now requires autorenew flag minimized autorenewal output updated support email address simplified some code removed extraneous comments --- ## [Certbot 5.3.0 Release](https://community.letsencrypt.org/t/certbot-5-3-0-release/245097)
**Author:** [@erica](https://community.letsencrypt.org/u/erica)\ **Replies:** 2\ **Last updated:** [February 3, 2026, 8:54pm UTC](https://community.letsencrypt.org/t/certbot-5-3-0-release/245097 "2026-02-03T20:54:15Z")
Certbot 5.3.0 has just been released. The changelog for the release is: Added A new command line flag, --ip-address, has been added. This requests certificates with IP address SANs when using the standalone or manual p… --- ## [Is it allowed for an ACME server to use the same token for several authorizations?](https://community.letsencrypt.org/t/is-it-allowed-for-an-acme-server-to-use-the-same-token-for-several-authorizations/244959)
**Author:** [@elDez](https://community.letsencrypt.org/u/elDez)\ **Replies:** 10\ **Last updated:** [January 30, 2026, 3:06pm UTC](https://community.letsencrypt.org/t/is-it-allowed-for-an-acme-server-to-use-the-same-token-for-several-authorizations/244959 "2026-01-30T15:06:49Z")
I facing a problem with an ACME server (LiteSSL) that behave unexpectedly. The server uses the same token for 2 authorizations (wildcard / non-wildcard). From my reading of the RFC: Token Entropy The http-01 and dns… --- ## [Built a Rust-based monitor for those missing the old expiration emails](https://community.letsencrypt.org/t/built-a-rust-based-monitor-for-those-missing-the-old-expiration-emails/244532)
**Author:** [@Ops\_Mechanic](https://community.letsencrypt.org/u/Ops_Mechanic)\ **Replies:** 25\ **Last updated:** [January 29, 2026, 7:59pm UTC](https://community.letsencrypt.org/t/built-a-rust-based-monitor-for-those-missing-the-old-expiration-emails/244532 "2026-01-29T19:59:45Z")
Hi everyone, Long-time user of Let's Encrypt (since the early beta days). Like many of you, I manage a lot of certs across different providers. I found that generic uptime monitors often missed intermediate chain expir… --- ## [Certbot up to 5.2.2 blocks requests for IP certificates](https://community.letsencrypt.org/t/certbot-up-to-5-2-2-blocks-requests-for-ip-certificates/244806)
**Author:** [@CLechleitner42](https://community.letsencrypt.org/u/CLechleitner42)\ **Replies:** 3\ **Last updated:** [January 23, 2026, 10:32am UTC](https://community.letsencrypt.org/t/certbot-up-to-5-2-2-blocks-requests-for-ip-certificates/244806 "2026-01-23T10:32:08Z")
Over a week ago 6-day and IP Address Certificates are Generally Available - Let's Encrypt announced the production availability of IP address certificates was annonuced.. Unfortunately the official-ish client certbot st… --- ## [Pebble error : urn:ietf:params:acme:error:serverInternal :: no serial provided](https://community.letsencrypt.org/t/pebble-error-urnparamserror-serverinternal-no-serial-provided/244568)
**Author:** [@jorgeja](https://community.letsencrypt.org/u/jorgeja)\ **Replies:** 4\ **Last updated:** [January 15, 2026, 11:16am UTC](https://community.letsencrypt.org/t/pebble-error-urnparamserror-serverinternal-no-serial-provided/244568 "2026-01-15T11:16:07Z")
hi, i was developing an java acme client using "acme4", i tested the client with a locally installed (on same pc) pebble. the client can interact with pebble by login, ordering , choosing challenge, and trigger the va… --- ## [Notification of New Intermediate CAs](https://community.letsencrypt.org/t/notification-of-new-intermediate-cas/244430)
**Author:** [@djohnsen1980](https://community.letsencrypt.org/u/djohnsen1980)\ **Replies:** 5\ **Last updated:** [January 9, 2026, 12:14am UTC](https://community.letsencrypt.org/t/notification-of-new-intermediate-cas/244430 "2026-01-09T00:14:11Z")
I’m reaching out to ask if there is a way to receive notifications when Let’s Encrypt introduces a new intermediate CA or rotates existing ones. We want to ensure our systems remain up-to-date and avoid any disruptions d… --- ## [CertSage 3.1.0 Release](https://community.letsencrypt.org/t/certsage-3-1-0-release/244295)
**Author:** [@griffin](https://community.letsencrypt.org/u/griffin)\ **Replies:** 0\ **Last updated:** [January 2, 2026, 8:38am UTC](https://community.letsencrypt.org/t/certsage-3-1-0-release/244295 "2026-01-02T08:38:25Z")
added support for ACME Renewal Information (ARI) added link canonical tag --- ## [Are short-lived profiles and IP address certs implemented in Pebble?](https://community.letsencrypt.org/t/are-short-lived-profiles-and-ip-address-certs-implemented-in-pebble/243980)
**Author:** [@aral](https://community.letsencrypt.org/u/aral)\ **Replies:** 3\ **Last updated:** [December 18, 2025, 7:27pm UTC](https://community.letsencrypt.org/t/are-short-lived-profiles-and-ip-address-certs-implemented-in-pebble/243980 "2025-12-18T19:27:31Z")
Hi folks, I’m just trying to add support for short-lived profiles and IP address certs to Auto Encrypt and I don’t seem to get any profile info other than default using Pebble v2.8.0 (vs Staging, where I see all the dif… --- ## [Certbot 5.2.2 Release](https://community.letsencrypt.org/t/certbot-5-2-2-release/243744)
**Author:** [@wgreenberg](https://community.letsencrypt.org/u/wgreenberg)\ **Replies:** 0\ **Last updated:** [December 10, 2025, 6:31pm UTC](https://community.letsencrypt.org/t/certbot-5-2-2-release/243744 "2025-12-10T18:31:39Z")
Certbot 5.2.2 has just been released! It just has a single fix for a regression: 5.2.2 - 2025-12-10 Fixed Fixed a regression that caused certbot to crash if multiple --webroot-path values were set on the command line. … --- ## [Certbot 5.2.1 Release](https://community.letsencrypt.org/t/certbot-5-2-1-release/243589)
**Author:** [@bmw](https://community.letsencrypt.org/u/bmw)\ **Replies:** 0\ **Last updated:** [December 3, 2025, 9:30pm UTC](https://community.letsencrypt.org/t/certbot-5-2-1-release/243589 "2025-12-03T21:30:46Z")
Certbot 5.2.1 has just been released. The changelog for the release is: 5.2.1 - 2025-12-03 Added Support for Python 3.14 was added. (#10477) Changed While nothing significant should have changed from the user's pers… --- ## [New implementation of acme client but struggling with even account creation](https://community.letsencrypt.org/t/new-implementation-of-acme-client-but-struggling-with-even-account-creation/243443)
**Author:** [@nicferrier](https://community.letsencrypt.org/u/nicferrier)\ **Replies:** 45\ **Last updated:** [December 3, 2025, 6:21pm UTC](https://community.letsencrypt.org/t/new-implementation-of-acme-client-but-struggling-with-even-account-creation/243443 "2025-12-03T18:21:39Z")
Hi, I write after exhausting everything else I can think of. I am looking to integrate implement Acme and have been testing my implementation against the staging server while cross referencing 'dehydrated' - the bash cl… --- ## [DNS-01 client: “During secondary validation: DNS problem: SERVFAIL looking up TXT” with delegated \_acme-challenge NS](https://community.letsencrypt.org/t/dns-01-client-during-secondary-validation-dns-problem-servfail-looking-up-txt-with-delegated-acme-challenge-ns/243331)
**Author:** [@plpa-devteam](https://community.letsencrypt.org/u/plpa-devteam)\ **Replies:** 4\ **Last updated:** [November 27, 2025, 3:29am UTC](https://community.letsencrypt.org/t/dns-01-client-during-secondary-validation-dns-problem-servfail-looking-up-txt-with-delegated-acme-challenge-ns/243331 "2025-11-27T03:29:16Z")
I’m building a DNS-01 validation client in Python so I can request wildcard certificates, but I keep getting this error from the Let’s Encrypt staging endpoint for any domain I try: During secondary validation: DNS pro… --- ## [Shortlived IPv6 certificates](https://community.letsencrypt.org/t/shortlived-ipv6-certificates/243124)
**Author:** [@magsys](https://community.letsencrypt.org/u/magsys)\ **Replies:** 8\ **Last updated:** [November 19, 2025, 5:32pm UTC](https://community.letsencrypt.org/t/shortlived-ipv6-certificates/243124 "2025-11-19T17:32:31Z")
I support a Delphi component library issued Acme certificates, and I am testing issuing IPv4 and IPv6 address certificates and accessing them using OpenSSL. OpenSSL reports the SANs of one of my Let's Encrypt certificat… --- ## [Is there a Python library for generating ACME certificates?](https://community.letsencrypt.org/t/is-there-a-python-library-for-generating-acme-certificates/242867)
**Author:** [@chippytech](https://community.letsencrypt.org/u/chippytech)\ **Replies:** 1\ **Last updated:** [November 11, 2025, 5:13am UTC](https://community.letsencrypt.org/t/is-there-a-python-library-for-generating-acme-certificates/242867 "2025-11-11T05:13:37Z")
Hello. I am looking for a Python library that can script acme certificates. I want to programmatically generate certificates in code. I did a brief Google search and couldnt find much yet. If not then what else can i d… --- ## [Certbot 5.1.0 Release](https://community.letsencrypt.org/t/certbot-5-1-0-release/242020)
**Author:** [@erica](https://community.letsencrypt.org/u/erica)\ **Replies:** 10\ **Last updated:** [October 30, 2025, 9:53pm UTC](https://community.letsencrypt.org/t/certbot-5-1-0-release/242020 "2025-10-30T21:53:29Z")
Certbot 5.1.0 has just been released. The changelog for the release is: 5.1.0 - 2025-10-07 Changed certbot-nginx no longer creates and uses self-signed certificates as an intermediate step when installing certificates… --- ## [Why does boulder/pebble require content-length on POST?](https://community.letsencrypt.org/t/why-does-boulder-pebble-require-content-length-on-post/241292)
**Author:** [@benburkert](https://community.letsencrypt.org/u/benburkert)\ **Replies:** 4\ **Last updated:** [September 13, 2025, 12:24am UTC](https://community.letsencrypt.org/t/why-does-boulder-pebble-require-content-length-on-post/241292 "2025-09-13T00:24:10Z")
Hi folks, I'm working on a new ACME client that internally uses a streaming API for generating JWS bodies for POST requests. So I enabled chunked transfer encoding in the HTTP client, but I get a 400 response from pebbl… --- ## [CertSage 3.0.2 Release](https://community.letsencrypt.org/t/certsage-3-0-2-release/241273)
**Author:** [@griffin](https://community.letsencrypt.org/u/griffin)\ **Replies:** 0\ **Last updated:** [September 11, 2025, 9:38pm UTC](https://community.letsencrypt.org/t/certsage-3-0-2-release/241273 "2025-09-11T21:38:40Z")
updated meta information added backlink --- ## [Shortlived certificate stuck as processing](https://community.letsencrypt.org/t/shortlived-certificate-stuck-as-processing/241006)
**Author:** [@rapsys](https://community.letsencrypt.org/u/rapsys)\ **Replies:** 17\ **Last updated:** [September 11, 2025, 2:42pm UTC](https://community.letsencrypt.org/t/shortlived-certificate-stuck-as-processing/241006 "2025-09-11T14:42:43Z")
Hi, I was trying to add support for shortlived certificate to my perl acme client. I experience a bug I don't understand while trying to generate a certificate for : vpn.aoihime.eu aurae.aoihime.eu 144.76.27.210 2a… --- ## [I'll fix Certbot](https://community.letsencrypt.org/t/ill-fix-certbot/241208)
**Author:** [@rogerfgay](https://community.letsencrypt.org/u/rogerfgay)\ **Replies:** 9\ **Last updated:** [September 10, 2025, 12:00am UTC](https://community.letsencrypt.org/t/ill-fix-certbot/241208 "2025-09-10T00:00:15Z")
Seriously - it's not beyond current technical capabilities by a long shot. Cerbot is dying. I'll fix it with financial support. Sorry - I know you'd rather have free stuff - but I don't live in my mother's basement. I've… --- ## [CertSage 3.0.0 Release](https://community.letsencrypt.org/t/certsage-3-0-0-release/238630)
**Author:** [@griffin](https://community.letsencrypt.org/u/griffin)\ **Replies:** 38\ **Last updated:** [September 9, 2025, 11:38am UTC](https://community.letsencrypt.org/t/certsage-3-0-0-release/238630 "2025-09-09T11:38:08Z")
Vastly streamlined underlying architecture and user experience to make CertSage more reliable and easier to use than ever No more clicking around to get back to the CertSage main page; everything can now be accomplis… [Previous page](https://community.letsencrypt.org/c/client-dev/14.md) [Next page](https://community.letsencrypt.org/c/client-dev/14.md?page=2)