"Forbidden by policy" for bic-inform.ru subdomains — request for review

Hello,

We are experiencing a certificate issuance problem for subdomains of bic-inform.ru.

We have successfully used Let's Encrypt certificates for this domain and its subdomains in the past. Existing certificates have been issued for several services under bic-inform.ru.

However, new certificate orders for:

meet.bic-inform.ru
rtc.bic-inform.ru

are now rejected immediately when the ACME order is created.

Certbot returns:

Error creating new order :: Cannot issue for "meet.bic-inform.ru": The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy

and the same error occurs for rtc.bic-inform.ru.

The rejection occurs during creation of the ACME order, before HTTP-01 validation.

We control the bic-inform.ru domain and its DNS infrastructure, and these subdomains are being used for a legitimate corporate communications service.

We noticed the recent discussion regarding yandex.ru, where a similar forbidden by policy response was identified as a high-risk domain policy issue rather than a sanctions-related restriction.

Could a Let's Encrypt staff member please confirm whether bic-inform.ru is currently subject to an issuance policy restriction and, if appropriate, advise us on the process for requesting a review/removal?

We can provide proof of domain control or organizational documentation privately if required.

Thank you.

LIMITED LIABILITY COMPANY BIK INFORM is currently on the Specially Designated Nationals and Blocked Persons list (Sanctions List Search), as such Let's Encrypt are not permitted to issue certificates to LIMITED LIABILITY COMPANY BIK INFORM.

Edit: I do not speak for Let's Encrypt and unless you're not the sanctioned entity, the only way to get the restriction lifted is to request removal from the SDN list (How to Request Removal from an OFAC Sanctions List | Office of Foreign Assets Control).

Thank you for the clarification. This explains the issuance rejection.