DNS challenge is in staging

yeah I know that stuff, i lol’ed at the extremelong long list of the .jp part and checked how the rules work coz of that.

also I dont mean a domain that is “listed” on the PSL but matches the list as public suffix.

lets’s say we want a cert for foo.bar.test.com

first it looks for a challenge in foo.bar.test.com (direct check)
if no match go up in the domain if we have a match mark as completed.
then we have bar.test.com
same procedure
now we have test.abc.zm
and now we have a stop because abc.zm matches *.zm on the PSL without any exceptions.