"Domain name contains an invalid character" for some IDN TLDs

My domain is: みんな/

I ran this command: sudo certbot certonly --nginx -d example.xn--/-69twc0d -d www.example.xn--/-69twc0d

It produced this output: Invalid identifiers requested :: Cannot issue for "example.xn--/-69twc0d": Domain name contains an invalid character (and 1 more problems. Refer to sub-problems for more information.)

My web server is (include version): nginx/1.10.3

The operating system my web server runs on is (include version): Debian 9

I can login to a root shell on my machine (yes or no, or I don't know): yes

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 0.28.0

I believe it fails due to the 2 hyphens in a row, despite that being the way it encodes.

Please update your Certbot. This version is ancient. Certbot currently is at 5.3.1.

2 Likes

Are you sure the IDN is encoded properly? There seems to be a stray slash in the domain you're using. Wikipedia shows this as xn--q9jyb4c

Maybe try -d example.xn--q9jyb4c

4 Likes

You're right, that DNS was wrong not sure how I got that.
And I updated certbot.
What version of nginx does certbot 5.3.0 support? Because now I get
"Certbot has detected that nginx version < 1.13.0 or compiled against openssl < 1.0.2l. Since these are deprecated, the configuration file being installed at /etc/letsencrypt/options-ssl-nginx.conf will not receive future updates. To get the latest configuration version, update nginx."

That's just a warning, not an error.

2 Likes