Wildcard certificates and Public Suffix List

Issuance Policy
1

Hello,

can Letsencrypt issue a wildcard certificate

*.domain.com

if “domain.com” is listed in the private section of the PSL? https://publicsuffix.org/list/public_suffix_list.dat

Thanks

2

If it is actually in the private section, it should be possible. See this comment for a situation where a domain was listed in the wrong section:

3

So I guess we shouldn’t expect any issue if we will list the domain in the private section.

Thanks

4

@jsha Can you confirm that you only block issuance for the ICANN section of the PSL? (And not the PRIVATE one)

5

Yep, I confirm this.