We're almost ready to issue certificates for IP address SANs from Let's Encrypt's production environment. They'll only be available under the shortlived profile (which has a 6-day validity period), and that profile will remain allowlist-only for a while. Please note: We have more work to do before …

Getting ready to issue IP address certificates

griffin June 24, 2025, 11:31pm 3

It should be an IP SAN type. This would be IP.# in OpenSSL, not DNS.#.

A related post:

3 Likes

Topic		Replies	Views
Questions regarding "Announcing Six Day and IP Address Certificate Options in 2025" Help	50	1393	March 12, 2025
Subject Alternative Name (SAN) : field type ipAddress (IP in a CSR) Issuance Policy	24	23871	September 2, 2017
Certificate for public IP without domain name Issuance Tech	85	247816	September 20, 2018
Using LE for internal Corporate hosts Help	32	2311	October 25, 2020
Plans to support RFC 8738 Feature Requests	23	3736	April 3, 2020