Policy forbids ... request for unblock

Issuance Policy
1

on my way to request a certificate using the letsencrypt simple client on windows, for the FQDN my.ally.at, identity.ally.at I get

Unexpected error
ACME Server Returned:
{
  "type": "urn:acme:error:rejectedIdentifier",
  "detail": "Policy forbids issuing for name",
  "status": 400
}

TIA,
Walter

2

Hi @cpu, want to take a look at this one?

3

Hi @matamosca,

Apologies about the trouble you’re having. I’ve kicked off the process to free ally.at domains for issuance. I’ll update this thread once production has been updated & the error removed. Thanks for your patience!

(Thanks for the tag @schoen!)

4

FWIW, the reason why this happened is that ally.com is an online bank and the CA has policies in place to keep registrations of similar looking domains from happening.

5

Hi again @matamosca,

This issue should be fixed. Please let me know if you’re still unable to issue for ally.at domains.

Thanks for your patience!