The tlsclient profile is only available to ACME accounts which used it prior to May 14, and even that limited access will be going away next month. If you need a TLS Client EKU, you need to use some other CA, and probably in most cases your own private one would be best.
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Sunsetting of Client EKU | 15 | 1001 | March 18, 2026 | |
| Ending TLS Client Authentication Certificate Support in 2026 | 6 | 3217 | July 8, 2026 | |
| Do *NOT* remove TLS Client Auth EKU! | 125 | 8246 | June 11, 2025 | |
| Client authentication | 4 | 155 | May 25, 2026 | |
| Let's Encrypt, ACME challenges, and ExtKeyUsage=ClientAuth | 14 | 2179 | July 8, 2023 |