Is it possible to use LE and issue certificates for public IP without domain names ?

It is possible to purchase certificates for IP addresses, but not from Let’s Encrypt. Let’s Encrypt may offer IP address certificates in the future, but as of September 2018 we do not.

What is the greater picture here?

If I recall correctly, the standard forbids SSL certificates assigned directly to IP addresses.

No, no certificates will be issued for IPs, only for DNS names.

Well I saw some hosters or cas give certs for IPs, so it must be possible, but as i said LE won’t do that.

I think the current Baseline Requirements norm is not to issue certificates for private (RFC 1918-reserved) IP addresses, while certificates for public IP addresses are still permitted. However, Let’s Encrypt has decided not to issue certificates for bare IP addresses even if this would be permitted…

[image] schoen: However, Let's Encrypt has decided not to issue certificates for bare IP addresses even if this would be permitted by the Baseline Requirements. This is probably a good idea. Site owners typically don't have as much control over their IP addresses as they do over their domain …

Thanks for all your replies. I’m working on an application for an organisation, they have an external IP address to allow external access on the web server but no domain names and I wanted to use https.

Buy a random domain name? Cheap and easy.

Free speech, dissent, journalistic privacy, privileged communication, whistleblowing, umpopular opinions - all of these are stifled without anonymity and encryption. By using and restricting useable SSL to the Domain Name System it makes free and secure communication subject to identification of nam…

Certificate for public IP without domain name

Issuance Tech

My1 December 7, 2015, 12:52pm 4

well it is possible iirc but LE certainly does not do that since checking that you “own” an IP is quite a bit harder than just for a domain, especially in the realm of dyn-IPs

Topic		Replies	Views
TLS certs for IP addresses for providers who change them? Issuance Policy	43	1025	December 17, 2025
Subject Alternative Name (SAN) : field type ipAddress (IP in a CSR) Issuance Policy	23	25141	August 3, 2017
Securing Private Intranet Sites Issuance Tech	21	33429	June 15, 2016
IP Address SSL Creation Issuance Policy	26	2573	February 6, 2024
IP Address certs and anycast Issuance Tech	16	915	October 16, 2025

Certificate for public IP without domain name

Related topics