Wildcard certificates and Public Suffix List

Issuance Policy
1

Hello,

can Letsencrypt issue a wildcard certificate

*.domain.com

if “domain.com” is listed in the private section of the PSL? https://publicsuffix.org/list/public_suffix_list.dat

Thanks

2

If it is actually in the private section, it should be possible. See this comment for a situation where a domain was listed in the wrong section:

2 Likes
3

So I guess we shouldn’t expect any issue if we will list the domain in the private section.

Thanks

1 Like
4

@jsha Can you confirm that you only block issuance for the ICANN section of the PSL? (And not the PRIVATE one)

1 Like
5

Yep, I confirm this.

1 Like
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.