Tried generating a certificate, fails with the following error: srv:~# certbot --server https://acme-staging-v02.api.letsencrypt.org/directory run --preferred-challenges http-01 --requ ired-profile shortlived --preferred-profile shortlived -d 2a01:799:15d1:8400::402 -v Requested name 2a01:799:15d1:…

Welcome @xstasy I moved your post into its own thread. It looks like Certbot does not yet support using IP addresses in its -d option I haven't seen the EFF's plan to support IP addresses. You might try asking on their github: GitHub - certbot/certbot: Certbot is EFF's tool to obtain certs from …

There already is an issue open: [Feature Request]: IP address subjectAlternativeName certificates · Issue #10346 · certbot/certbot · GitHub

So, I followed your recommendation and tried the following in lego: lego --http --server https://acme-staging-v02.api.letsencrypt.org/directory -m x@gbps.io -a -d 2a01:799:15d1:8400::402 run --profile shortlived Resulting in a urn:ietf:params:acme:error:badCSR :: Error finalizing order :: CSR cont…

[image] xstasy: CSR contains IP address in Common Name Looks like a lot of startup pain for IP addresses. There's a good reason this is only in Staging :slight_smile: A little bit of a "chicken and egg" problem as ACME Client authors have only recently been able to test with LE for IP addr…

Most of Let's Encrypt's testing was done with Lego, but we provided a domain name in addition to an IP (and put the domain first, so that's what was in the CSR's CN). Our recommendation is that clients don't populate a CN in the CSR unless explicitly requested, but I know that's going to be a big c…

Quick question to avoid making a new thread, has that TLS ALPN fix landed in staging yet? Was just trying it and wasn't sure if I was hitting the bug or something else on my end.

[image] xstasy: Do you know the correct way to proceed? Please file a feature request (or bug report) with lego as they shouldn't use a commonName to begin with as that has been deprecated for a long time now. But especially for IP addresses they shouldn't add one or at least provide the opti…

Certbot cert request fails for IP address in LE Staging

Help

MikeMcQ July 8, 2025, 11:24pm 10

Wanted you to see lego has a fix out. Available now or wait for formal release

Topic		Replies	Views
Certbot fails for IPv4 SSL creation Help	12	1774	September 10, 2025
Need help getting cert with IP address Help	8	556	December 1, 2025
NewOrder request included invalid non-DNS type identifier: type "ip", Help	12	4533	January 28, 2022
Certbot up to 5.2.2 blocks requests for IP certificates Client dev	3	307	January 23, 2026
Does Let’s Encrypt already support issuing certificates for IP addresses? Help	7	518	January 15, 2026

Certbot cert request fails for IP address in LE Staging

Related topics