# "Forbidden by policy" for bic-inform.ru subdomains — request for review

**URL:** <https://community.letsencrypt.org/t/forbidden-by-policy-for-bic-inform-ru-subdomains-request-for-review/250894>\
**Category:** Issuance Policy\
**Created:** [September 7, 2026, 12:03pm UTC](https://community.letsencrypt.org/t/forbidden-by-policy-for-bic-inform-ru-subdomains-request-for-review/250894 "2026-09-07T12:03:23Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ilyusa206](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ilyusa206/32/92048_2.png) [@Ilyusa206](https://community.letsencrypt.org/u/Ilyusa206)\
**Post date:** [September 7, 2026, 12:03pm UTC](https://community.letsencrypt.org/t/forbidden-by-policy-for-bic-inform-ru-subdomains-request-for-review/250894/1 "2026-09-07T12:03:23Z")

</div>

Hello,

We are experiencing a certificate issuance problem for subdomains of **[bic-inform.ru](http://bic-inform.ru)**.

We have successfully used Let's Encrypt certificates for this domain and its subdomains in the past. Existing certificates have been issued for several services under [bic-inform.ru](http://bic-inform.ru).

However, new certificate orders for:

**[meet.bic-inform.ru](http://meet.bic-inform.ru)**  
**[rtc.bic-inform.ru](http://rtc.bic-inform.ru)**

are now rejected immediately when the ACME order is created.

Certbot returns:

`Error creating new order :: Cannot issue for "meet.bic-inform.ru": The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy`

and the same error occurs for `rtc.bic-inform.ru`.

The rejection occurs during creation of the ACME order, before HTTP-01 validation.

We control the **[bic-inform.ru](http://bic-inform.ru)** domain and its DNS infrastructure, and these subdomains are being used for a legitimate corporate communications service.

We noticed the recent discussion regarding `yandex.ru`, where a similar `forbidden by policy` response was identified as a high-risk domain policy issue rather than a sanctions-related restriction.

Could a Let's Encrypt staff member please confirm whether **[bic-inform.ru](http://bic-inform.ru)** is currently subject to an issuance policy restriction and, if appropriate, advise us on the process for requesting a review/removal?

We can provide proof of domain control or organizational documentation privately if required.

Thank you.

---

<div class="post-metadata">

**Author:** ![MaxHearnden](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/maxhearnden/32/87555_2.png) [@MaxHearnden](https://community.letsencrypt.org/u/MaxHearnden)\
**Post date:** [September 7, 2026, 12:22pm UTC](https://community.letsencrypt.org/t/forbidden-by-policy-for-bic-inform-ru-subdomains-request-for-review/250894/2 "2026-09-07T12:22:31Z")

</div>

LIMITED LIABILITY COMPANY BIK INFORM is currently on the Specially Designated Nationals and Blocked Persons list ([Sanctions List Search](https://sanctionssearch.ofac.treas.gov/Details.aspx?id=45930)), as such Let's Encrypt are not permitted to issue certificates to LIMITED LIABILITY COMPANY BIK INFORM.

Edit: I do not speak for Let's Encrypt and unless you're not the sanctioned entity, the only way to get the restriction lifted is to request removal from the SDN list ([How to Request Removal from an OFAC Sanctions List | Office of Foreign Assets Control](https://ofac.treasury.gov/specially-designated-nationals-list-sdn-list/filing-a-petition-for-removal-from-an-ofac-list)).

---

<div class="post-metadata">

**Author:** ![Ilyusa206](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ilyusa206/32/92048_2.png) [@Ilyusa206](https://community.letsencrypt.org/u/Ilyusa206)\
**Post date:** [September 7, 2026, 1:17pm UTC](https://community.letsencrypt.org/t/forbidden-by-policy-for-bic-inform-ru-subdomains-request-for-review/250894/3 "2026-09-07T13:17:13Z")

</div>

Thank you for the clarification. This explains the issuance rejection.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [September 9, 2026, 1:17pm UTC](https://community.letsencrypt.org/t/forbidden-by-policy-for-bic-inform-ru-subdomains-request-for-review/250894/4 "2026-09-09T13:17:49Z")

</div>

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.
