# Issue an SSL certificate

**URL:** <https://community.letsencrypt.org/t/issue-an-ssl-certificate/246651>\
**Category:** Help\
**Created:** [April 16, 2026, 9:05am UTC](https://community.letsencrypt.org/t/issue-an-ssl-certificate/246651 "2026-04-16T09:05:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![alireza144377](https://avatars.discourse-cdn.com/v4/letter/a/a6a055/32.png) [@alireza144377](https://community.letsencrypt.org/u/alireza144377)\
**Post date:** [April 16, 2026, 9:05am UTC](https://community.letsencrypt.org/t/issue-an-ssl-certificate/246651/1 "2026-04-16T09:05:37Z")

</div>

Hi, I’m trying to issue an SSL certificate for my domain **[ramanco.ir](http://ramanco.ir/)** (including the wildcard `*.ramanco.ir`), but I’m getting an error and I can’t figure out why.

**Error log:**

```
                                        *content\_copy* text

```

`Found wildcard domain name and http challenge type, switching to dns-01 validation. 2026/04/15 19:25:59 [INFO] [ramanco.ir, *.ramanco.ir] acme: Obtaining SAN certificate 2026/04/15 19:25:59 Could not obtain certificates: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Error creating new order :: Cannot issue for "*.ramanco.ir": The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy (and 1 more problems...) Failed to issue new certificate`

It says the domain is **forbidden by policy**.

Is there any restriction for `.ir` domains or for this specific domain?

How can I fix this or what should I check?

I’d appreciate any help

---

<div class="post-metadata">

**Author:** ![Patryk](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/patryk/32/8485_2.png) [@Patryk](https://community.letsencrypt.org/u/Patryk)\
**Post date:** [April 16, 2026, 10:59am UTC](https://community.letsencrypt.org/t/issue-an-ssl-certificate/246651/2 "2026-04-16T10:59:48Z")

</div>

The domain is on a sanctions list: [Sanctions List Search](https://sanctionssearch.ofac.treas.gov/Details.aspx?id=30411)

Let's Encrypt as a US-based organization must follow it.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [May 16, 2026, 11:00am UTC](https://community.letsencrypt.org/t/issue-an-ssl-certificate/246651/3 "2026-05-16T11:00:39Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.