Certificate signature failed. If you supplied your own CSR make sure the domains on it match what you put on SSLForFree. If there is a rate limiting error at the end of this paragraph certificates per Domain is currently 5 per 7 days. Try asking Lets Encrypt to increase the limit or wait 7 days. Rate limits should increase in the near future. { “type”: “urn:ietf:params:acme:error:malformed”, “detail”: “Error finalizing order :: policy forbids issuing for: “xn–fct27t3xv””, “status”: 400 }
HI,
Please fill in this form for us to help you.
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is:
I ran this command:
It produced this output:
My web server is (include version):
The operating system my web server runs on is (include version):
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know):
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Thank you
Hi @dgqjj,
It looks like you are trying to get a certificate for the bare name “家教网”, rather than a fully-qualified domain name like “家教网.cn” or something. You’ll need to enter your complete domain name in order to obtain a certificate.
If you do enter the domain in the xn-- form, please make sure that you are also entering it with two hyphens (xn--) and not an en dash (xn–). However, I think the important problem is that you’re missing the top-level domain.
Discourse sometimes displays the double hyphen as a long dash.
The missing TLD is a definite problem.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.