Short-lived certificates

I’m trying to request certificates that include a DNS name as well as IPv4 and IPv6 addresses as SANs. From what I understand, this is only possible when using the short-lived certificate profile.

When I use the staging ACME endpoint, everything works as expected — the certificates are issued and saved without problems. But when I switch to the production ACME endpoint, I receive an error stating that my account isn’t authorized to issue short-lived certificates.

According to the Let’s Encrypt documentation, short-lived certificates require being on an allowlist. How can I request access to this profile, and what’s the process to be added to the allowlist?

Hi @dion! Post your LE production account URL on the thread at When will Let's Encrypt's IP certificates be officially launched? along with your planned use case and they should add it. May take a few days.

2 Likes