Please help me to request a blacklist removal?


#1

I have problems getting a certificate for the domains “thuexeotosaigon.fdola.com, www.thuexeotosaigon.fdola.com, phuhieu.net, www.phuhieu.net, quangcaotrenxe.com.vn, www.quangcaotrenxe.com.vn”.
“Error creating new cert :: policy forbids issuing for:”

Is there a page for a blacklist removal request?
Thanks you


#2

It is most likely not a blacklist issue, but you created your CSR wrong.

Domains need to be included individually on a CSR, you cannot just list them using commas on the command line.

Review something like https://serverfault.com/a/694241 to see how to do it with openssl.


#3

Hi pro,
This is a picture https://imgur.com/L0mYd9V
I click save -> error


#4

I think the problem is with your Common Name field. The software interface that you’re using should probably not even allow you to choose the value for this field; it should probably choose one automatically to avoid this error.

For historical reasons, the Common Name in a certificate needs to be one of the domain names that the certificate covers. In your screenshot, you chose thuexeotosaigon as the Common Name, but this is not valid because it’s not a complete domain name. Probably you should specify thuexeotosaigon.fdola.com as the Common Name, or leave this field blank if the interface allows you to do that.

Despite the term Common Name, which sounds like it would mean “informal name” or “short name” or something, the historical practice with certificates requires that it must be a DNS domain name, if it’s present. So I think the problem you’re encountering here is that thuexeotosaigon, by itself, isn’t a DNS domain name.


#5

Yes, that right. because Common name: I replace Common name with: quangcaotrenxe.com.vn is success
Thanks for suppor


closed #6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.