-
Hi ProK
We don’t support wildcard domain certificates right now.
Regards,
Andriy
-
Hi Andriy Mahats ,
I've found this post after looking through the services that buypass offer and notice that while you don't offer wildcard DV certificates yet, you do have an ACME v2 test endpoint.
I've tried creating a certificate with certbot using the test v2 endpoint and requesting a wildcard certificate but I receive a 403 forbidden error with the message REJECTED_IDENTIFIER.
Could you offer any advice for using the test endpoint? Also, what are the limitations of the test endpoint, would it produce a valid certificate or is it purely for testing the ACME v2 standards.
Many Thanks,
Adrian.
-
Hi Adrian Rose
Your request for a wildcard certificate in our test environment was rejected due to the fact that the CAA records for the domain forbid issuance.
The v2 endpoint we offer in test environment, implements the latest version of the ACME specification and it has support for wildcard certificates. The endpoint has latest features we are working on and is recommended for use by developers creating ACME clients.
Certificates issued in the test environment will be valid test certificates, but they will not be trusted by browsers.
The returned response REJECTED_IDENTIFIER contained the information that the domain was rejected due to CAA in the “subproblems” array.
This was not correct, since it should have been an COMPOUND error response. We are working to fix this.
Regards,
Andriy
-
Hi Andriy Mahats ,
Thanks for the reply, I hadn't thought about CAA getting in the way of certificate issuance, thanks as well for the information regarding test endpoint.
Do you have a timescale for launching the v2 endpoint?
Regards,
Adrian.
-
Hi Adrian Rose
We have not decided when to release it to production.
Regards,
Andriy
-
