Issuing shortlived fails with 403 on one domain but not others

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

/home/night/.acme.sh/acme.sh --issue -d domain.pw -d ".domain.pw" -d domain.cloud -d ".domain.cloud" --dns dns_cf --keylength ec-384 --certificate-profile shortlived --force --renew-hook "/home/night/.acme.sh/deploy-h/working/deploy_wo_grafana.sh"

It produced this output:

"type": "urn:ietf:params:acme:error:unauthorized",
"detail": "Error creating new order :: account ID xxxxx is not permitted to use certificate profile "shortlived"",
"status": 403
}
My web server is (include version):

v3.1.3

The operating system my web server runs on is (include version):
n/r
My hosting provider, if applicable, is:
n/r

I can login to a root shell on my machine (yes or no, or I don't know):
yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
n/r

it works fine in staging but not in prod

2

Yes, it is not yet generally available in production. See: Profiles - Let's Encrypt

LE was recently taking requests to be on the allow list. But, given the expected availability is soon they are not taking new requests. See: When will Let's Encrypt's IP certificates be officially launched? - #77 by aarongable

2 Likes
3

ah makes sense, hopefully soon, im working on a deploy scrip to autoamte lots of backend stuff in docker across several platforms would like to test that

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.