@leader, is that SAN or CN?
@leader, I forgot that you could have an e-mail SAN (but you can!).
Let’s ask @jsha about this. @jsha, could you look into or opine on the problem that @leader describes above?
This is a bug in Boulder. Thanks for pointing it out! I’ve filed an issue: https://github.com/letsencrypt/boulder/issues/2203.
Brilliant, thanks for picking this up. Glad to see that I guessed right re the secondary check
Since it's not quite clear when exactly this is getting fixed, The Certificate Wizard on ZeroSSL will be updated this weekend to indicate that CSR with those types of records is unlikely to have the certificate issued.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.