Location of letsencrypt.org issuance policy documentation

[bruncsak]

@mnordhoff

@bruncsak

that there is the requirement of my domain pointing to an IP address, and only precisely on that IP address it is possible to fulfill the challenge for the given domain name?

Yes. They're the same in that way.

(HTTP-01 will follow redirects, though.)

Hi @mnordhoff,

Thanks. That cools me down a lot. I believe, that if xyz.example.com points to an IP address, on that IP address it is no possible to fulfill the challange for the example.com or abc.example.com (not pointing to the same IP address), even with TLS-SNI method. If this is not the case, please let me know.

[mnordhoff]

@bruncsak

I believe, that if xyz.example.com points to an IP address, on that IP address it is no possible to fulfill the challange for the example.com or abc.example.com (not pointing to the same IP address), even with TLS-SNI method. If this is not the case, please let me know.

You're correct. example.com and abc.example.com can't fulfill a challenge for xyz.example.com.

[Osiris]

If their IP addresses are different