// ExtractSuffix returns the public suffix of the domain using only the "ICANN"
// section of the Public Suffix List database.
// If the domain does not end in a suffix that belongs to an IANA-assigned
// domain, ExtractSuffix returns an error.
The error happens when you try to create an ACME account with an invalid email address.
N.b. it is separate from what domains you might be planning to create certificates for.
What ACME client are you using?
What email address is it using when creating an ACME account?
Are you sure there’s not a typo, or a syntax issue, like < or > characters or an extra space?
Haven't deployed a site for a couple of months though. Is it worth chasing this with Bytemark? Bytemark's Symbiosis web server management system integrated with Debian.