Thank you

I just wanted to drop a thank you note for offering an alternative European ACME solution. ❤️ from the Netherlands

WinCertes: Windows ACMEv2 Client

Hello, Just wanted to mention the ACMEv2 client that we developed at Evertrust: https://github.com/aloopkin/WinCertes . It's OpenSource, based on the Certes ACMEv2 library,…

• Answered

generic questions about mentioned crt issue

https://community.buypass.com/t/h7y3k4h/important-information-that-requires-immediate-action It's maybe a stupid question (but not clear for me): - There is a time interval/frame? (from: XXX- - to:…

• Answered

Chain/fullchain file contains unexpected characters

Chain file contains unexpected characters also partially in DOS format (with CRLF) While obtaining a certificate using certbot 0.28.0 the saved chain file contains additional characters at the…

• Answered

Buypass not sending CAA violation reports (IODEF)

Hi, In the Buypass documentation on CAA, it says that Buypass will send reports via email in IODEF format when a CAA policy violation occurs: Buypass uses iodef and will report certificate…

• Answered

cert-manager and Kubernetes

Hi, I'm trying to use the ACMEv2 test endpoint with cert-manager for Kubernetes (standard Helm deployment using HTTP-01 issuing). I created an issue on GitHub https://github.…

• Answered

Multiple Domain Names support

Hi Do you support Multiple DNS names in BuypassGO acme client requests? I've been trying to enroll for BuypassGO cert. If I try with single domain name, request succeeds.…

• Answered

Certbot - Internal Server Error - After MPIC was introduced

After Buypass introduced MPIC to enhance the security passing out certificate through ACME, we got problems when trying to obtain certificates. We are whitelisting their IP-subnett (185.62.160.…

Urgent message to renew certificates issued before Dec 22 but renewal not working

Hi, We recently got an email from you telling us we need to renew all Buypass ACME certificates issued before December 22nd or they will be revoked on January 4th but it looks like no renewals or new…

• Answered

Validation of IPv6 only server

I've tried to use ACME to generate a cert for a server that only has a public IPv6 IP address. The setup works fine, but the validation doesn't seem to happen.…

• Answered

Whitelist IPs from BuyPass for ACME HTTP challenge

Hi. Until some time, we were able to whitelist BuyPass IPs in order to perform the HTTP ACME challenge. We got the information from this page which was: IPv4: 185.62.160.…

• Answered

Deactivating an Authorization

Hi! Is it possible to deactivate a valid authorization (status = valid)? [status] => valid [contact] => Array ( [0] => mailto:xxxxxxx ) [termsOfServiceAgreed] => 1 [orders] => https://api.buypass.…

• Answered

DNS-01 validation and caching

Hello, I have two quick questions regarding DNS-01 validation: 1. When validating a DNS-01 challenge, does Buypass support having multiple TXT records in place for the same name/domain?…

• Answered

All authorizations were not finalized by the CA.

When I try to request a certificate from PROD or STAGING, it fails with this error: All authorizations were not finalized by the CA. When I use Let's Encrypt, it works with no issues.…

• Answered

MALFORMED_BAD_REQUEST while renew an expiring certificate

Hello. I have issue with 2 certificates which are due to expire. I can see in the letsencrypt.log the following message as a result to the following request: 2021-01-04 14:07:59,896:DEBUG:acme.…

• Answered

Authentication after updating CAA

I attempted to fetch a certificate and had forgotten to update CAA to include permission for buypass. Obviously this failed, but after fixing this any further attempts with the same fqdn are…

• Answered

Do you follow redirect when validate http-01 ?

I have web server that open both port 80 and 443 but always redirect http to https and it seems not work when I try to issue Buypass certificate because of this error Error, can not get domain uri.…

• Answered

Support for OCSP Must-Staple

Hello, Could you add OCSP Must-Staple to GO SSL ACME? Thank you :)

• Answered

mail and acme-client

I am a regular user of OpenBSD, which provides an acme client named ... acme-client (sic). This client does not have an option to register, notably no mail is provided.…

• Answered

ACME V2 - staging vs production behaviour is different.

Currently the ACME V2 API will issue a certificate for multiple domain names/subdomain in Staging mode, but the live API will only issue a single domain + www.…

• Answered

Deviation from RFC8555

Hello, I am the author of uacme I've found that your ACME server returns an empty body when it responds to a request for the account URL given a key according to RFC8555 section 7.3.…

• Answered

DNS challenge: authz is pending, challenge processing even after error is present

Hi @Andriy Mahats, I've noticed the following behavior when trying DNS validation with the ACME v2 (RFC 8555) staging endpoint: in case challenges fail,…

• Answered

ACMEv2 production endpoint

Any thought on when you will provide ACMEv2 endpoints for production use?

• Answered

Free of Cost Forever ?

Right now use of Buypass to obtain DV certificates is completely free of cost(Correct me if I am wrong)? Shall we avail these benefits of obtaining fresh/renew DV certificates in future forever for…

• Answered