Common ACME Issues/Errors
-
If you experience an error message while issuing and installing an SSL certificate via ACME, that error message could be coming from the ACME client or from the certificate authority. Here are some common errors or issues you might experience, and how to solve them.
-
-
1
A requested identifier has not been delegated domain.tld
This error message typically indicates that you're trying to issue a certificate for a domain that is not on the order. Double check these things:
- In your install command, specify a domain - not the full URL.
Correct: -d domain.tld
Incorrect: -d http://domain.com - Check that the domain that you're trying to issue for is listed on your ACME SSL certificate order. Don't include any additional domains or subdomains that are not listed on your order (although you can include both domain.dom and www.domain.tld)
If you're still getting the error message after checking the above items, contact our support team and we'll be glad to assist.
- In your install command, specify a domain - not the full URL.
-
2
Issues with Certbot when using multiple EAB credentials
By default, certbot uses one set of EAB credentials for any given certificate authority. If you place separate ACME SSL orders and try to install them on the same server, you may have issues because certbot will try to use the same set of EAB credentials for both orders.
The simplest way to solve this issue is use one order / EAB credentials for each server. When you need an SSL certificate for another domain on the same server, add domains to the existing order (instead of placing a new order).
-