Cannot emit certificate on new Brazilian ia.br.TLDs

Issuance Tech
1

New TLDs have been release in Brazil by registro.br.

It seems they are considered by LetsEncrypt as simple domains instead of being TLDs so anything.ia.br appears to be treated as a subdomain of ia.br instead of a root domain using the .ia.br TLD.

I haven’t check yet if this happens with the other new TLDs ( .social.br and .api.br)

`

sudo certbot -d ate.ia.br -d www.ate.ia.br
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for ate.ia.br and www.ate.ia.br
An unexpected error occurred:
too many certificates (50) already issued for "ia.br" in the last 168h0m0s, retry after 2025-09-03 04:03:59 UTC: see Rate Limits - Let's Encrypt
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

`

2

Hi! To determine what the "Effective TLD" is, we use the Public Suffix List:

These were added to the upstream library we use 1 week ago:

We will upgrade to the new version of the list in the next week or two, which should solve this issue.

8 Likes
3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.