HTML CSR page fails at Step 3 with "Error: Account registration failed. Please start back at Step 1. { "type": "urn:acme:error:malformed", "detail": "JWS verification error", "status": 400 }"

@leader, is that SAN or CN?

@schoen SAN …

@leader, I forgot that you could have an e-mail SAN (but you can!).

Let’s ask @jsha about this. @jsha, could you look into or opine on the problem that @leader describes above?

This is a bug in Boulder. Thanks for pointing it out! I’ve filed an issue: https://github.com/letsencrypt/boulder/issues/2203.

Thanks for looking into this, @jsha!

Brilliant, thanks for picking this up. Glad to see that I guessed right re the secondary check :slight_smile:

Since it's not quite clear when exactly this is getting fixed, The Certificate Wizard on ZeroSSL will be updated this weekend to indicate that CSR with those types of records is unlikely to have the certificate issued.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.