List of IPs to whitelist

The ip range in https://community.buypass.com/t/k9dnwh/list-of-ips-to-allow-on-firewall is not sufficient. The first http request came from: 185.62.162.37 which is in the given range.…

Certbot - Internal Server Error - After MPIC was introduced

After Buypass introduced MPIC to enhance the security passing out certificate through ACME, we got problems when trying to obtain certificates. We are whitelisting their IP-subnett (185.62.160.…

Change of ownership, will the Go SSL (free ACME) certs continue?

will the change of ownership: https://www.buypass.com/news/change-of-ownership-in-buypass-as change the Go SSL free ACME certs? Also if they chance how much lead time will we get?

Remove limit of 5 domains per certificate

Hello, i'am currently looking for alternatives to US american companies due to the current political situation. I'am using Lets Encrypt for my certificates and would like to change that.…

CAA Error

I am getting the error "Domain is rejected due to CAA forbids issuance" from "/acme/new-order". On my first try, i indeed had a wrong caa record. I did multiple tries after that with both,…

Thank you

I just wanted to drop a thank you note for offering an alternative European ACME solution. ❤️ from the Netherlands

Inquiry Regarding Retry-After Header in ACME Renewal-Info Endpoint

Dear Buypass Team, We are integrating your ACME renewal-info endpoint into our system and have encountered a minor discrepancy. Our implementation, which follows the ACME ARI draft,…

How to integrate Buypass with Caddyfile?

Hello, I tried to search web and found this solution https://www.ookangzheng.com/setup-caddy-server-with-buypass-go-ssl-a-norwegian-caa-provider/, but it doesn't work in my case.…

Certificate doesn't renew.

I am using Buypass Go SSL on my Plesk host. Although I cannot request the certificate on demand, but it is issued after a while. None of the certificates are getting renewed before they run out.…

When will certificates be issued for IP addresses?

When will certificates be issued for IP addresses? For example, ipv4 and ipv6

Support for TLS-ALPN-01 verification?

I use a load balancer that supports the Challenge Types TLS-ALPN-01 and DNS-01. Will BuyPass Go SSL support TLS-ALPN-01 in the near future? I can't find any information regarding the challenge type…

failed to fetch new nonce

I considered few ACME clients and choosen uacme. $ uacme -a https://api.buypass.com/acme/directory -b 4096 -c /home/gamliel/.uacme -t RSA -v -v -v -y new user@example.com uacme: version 1.7.…

SSL ACME certificate not recognize on app mobile

When trying to access an API with an SSL ACME certificate via a mobile application, the cell phone does not recognize the website/API certificate.

• Answered

Buypass cannot sign CN domain names, but letsencrypt.org can. The CAA settings of both are the same.

Buypass cannot sign CN domain names, but letsencrypt.org can. The CAA settings of both are the same. Cache-Control: no-store Content-Length: 0 Date: Tue, 21 May 2024 05:47:05 GMT Link: <https://api.…

• Answered

urn:ietf:params:acme:error:unauthorized for HTTP-01

Hi, We're receiving a urn:ietf:params:acme:error:unauthorized error for the domain cfjump.eunorau-ebike.com. We are trying to use HTTP-01 challenge, and this does work as expected for Let's Encrypt.…

Domain rejected as high-risk

We are using let's encrypt with BuyPass to issue certificates for our lower level environment. It has been working well for the past few months. However,…

• Answered

Creating a certificate with ECDSA is failing

Hi, I'm trying to use a .csr file to create a GO SSL certificate, but I'm getting the error that an "up" Link header is missing. Is there anything I can do about it?…

• Answered

When using ACME.sh to apply for a certificate, the verification fails

There is no problem in registering or obtaining the verification information. However, the verification step cannot be passed. The parsing information has been tested and there is no problem.…

Get http bad request from ACME API

Hi, We have a ACME solution set up using KeyVault AcmeBot (https://github.com/shibayan/keyvault-acmebot) and are now only recieving HTTP Bad Request responses from your ACME API.…

DNS validation currently broken?

With re-validating certs, I managed to renew the certs using http-01 without issue, but anything that uses dns-01 as a validation seems to fail. The error certbot is getting is:…

• Answered

Applying Certificate - IIS

I'm getting a strange issue, I've managed to renew the certificate, but it fails to apply the certificate and gives me an error A specified logon session does not exist.…

Overview all of my certificates?

I got the email suggesting I renew my certificates as they're about to be revoked. Can I log on somewhere on this site to see a list of all of the certificates I have? It needs to be this site,…

• Answered

Problem validating certain subdomains

I am trying to create a SAN certificate for prod-api.glucura.io and prod-db.glucura.io. I am using goacme/lego v4.14 with DNS validation. The same method works for stage-api.glucura.io and stage-db.…

• Answered

Unexpected Behavior in DNS Challenge Generation with Certbot Command

Is there an issue with the certbot command, as it seems to generate a new DNS challenge on every attempt, even if there is an old validation pending?

• Answered