The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy

Hello,

I try to get certificate for domain “marathon9may.rncb.ru”, but receive error “The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy”.

My domain is:

I ran this command:
dehydrated --domain marathon9may.rncb.ru -c

It produced this output:
Processing marathon9may.rncb.ru

Details:
HTTP/1.1 100 Continue

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 May 2020 08:52:09 GMT
Content-Type: application/problem+json
Content-Length: 212
Connection: keep-alive
Boulder-Requester: 23959142
Cache-Control: public, max-age=0, no-cache
Replay-Nonce: 0101L_4jDf3QZVmTLWAXIEp13dw3x2kV-Z34dM2vjNqEI9g

{
“type”: “urn:acme:error:rejectedIdentifier”,
“detail”: “Error creating new authz :: The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy”,
“status”: 400
}

My web server is (include version):
openresty/1.13.6.1

The operating system my web server runs on is (include version):
CentOS release 6.9

My hosting provider, if applicable, is:
AWS

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
Dehydrated version: 0.6.5

1 Like

Hi @AlexanderDemidov

some domain names are blocked.

Read

there is a mail address you can use to ask.

2 Likes

In this case, Let’s Encrypt might not be able to do anything, because the domain is on the OFAC sanction list: https://letsdebug.net/marathon9may.rncb.ru/134359

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.