The domain investor-test.qiwi.com is blocked by LE to issue certificate

Help
#1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: investor-test.qiwi.com

We are not able to get LE certificate for investor-test.qiwi.com. It looks like for some reason there is a block by LE.

Policy forbids issuing for name. investor.qiwi.com
#2

It would help to show the exact error message or the details in the log file.

#3

Probably this:

$ certbot certonly --manual --preferred-challenges http -d investor-test.qiwi.com --dry-run
Error creating new authz :: Policy forbids issuing for name
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator manual, Installer None
Obtaining a new certificate
An unexpected error occurred:
Error creating new authz :: Policy forbids issuing for name

Looking at Boulder, it looks like (qiwi.com and *.qiwi.com) have been explicitly blacklisted.

Speculation: it may be due to the fact it is a financial institution, see this post:

#4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.