Policy forbids ... request for unblock


on my way to request a certificate using the letsencrypt simple client on windows, for the FQDN my.ally.at, identity.ally.at I get

Unexpected error
ACME Server Returned:
  "type": "urn:acme:error:rejectedIdentifier",
  "detail": "Policy forbids issuing for name",
  "status": 400



Hi @cpu, want to take a look at this one?


Hi @matamosca,

Apologies about the trouble you’re having. I’ve kicked off the process to free ally.at domains for issuance. I’ll update this thread once production has been updated & the error removed. Thanks for your patience!

(Thanks for the tag @schoen!)


FWIW, the reason why this happened is that ally.com is an online bank and the CA has policies in place to keep registrations of similar looking domains from happening.


Hi again @matamosca,

This issue should be fixed. Please let me know if you’re still unable to issue for ally.at domains.

Thanks for your patience!


This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.