April 16, 2026, 9:05am 1

Hi, I’m trying to issue an SSL certificate for my domain ramanco.ir (including the wildcard *.ramanco.ir), but I’m getting an error and I can’t figure out why.

Error log:

                                        *content\_copy*                        text

Found wildcard domain name and http challenge type, switching to dns-01 validation. 2026/04/15 19:25:59 [INFO] [ramanco.ir, *.ramanco.ir] acme: Obtaining SAN certificate 2026/04/15 19:25:59 Could not obtain certificates: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Error creating new order :: Cannot issue for "*.ramanco.ir": The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy (and 1 more problems...) Failed to issue new certificate

It says the domain is forbidden by policy.

Is there any restriction for .ir domains or for this specific domain?

How can I fix this or what should I check?

I’d appreciate any help

The domain is on a sanctions list: Sanctions List Search

Let's Encrypt as a US-based organization must follow it.

5 Likes