Policy forbids issuing for name : ssi.samsung.com

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
ssi.samsung.com
I ran this command:
sudo certbot certonly --webroot -w /data/nginx/ssl/ -d .ssi.samsung.com
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
Obtaining a new certificate
An unexpected error occurred:
Error creating new order :: Policy forbids issuing for name
Please see the logfiles in /var/log/letsencrypt for more details.
My web server is (include version):
Nginx Reverse proxy server
The operating system my web server runs on is (include version):
Ubuntu 16.04
My hosting provider, if applicable, is:
Running Artifactory as Container.
I can login to a root shell on my machine (yes or no, or I don’t know):
Yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
NO
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): certbot 0.31.0

2

Samsung.com is a restricted domain. You will need to get someone who verifiably represents Samsung to approve issuance of a certificate under that domain.

3

:wave: Hi @shivk.gupta, welcome to the community forum.

As @maxh mentioned (thanks!) you're receiving this error because samsung.com and its subdomains are considered a high-value domain name. I will direct message you with the process that must be completed to issue for this domain.