Getting ready to issue IP address certificates

Summary

We're almost ready to issue certificates for IP address SANs from Let's Encrypt's production environment. They'll only be available under the shortlived profile (which has a 6-day validity period), and that profile will remain allowlist-only for a while. Please note: We have more work to do before we're ready to launch this feature for the public. We don't yet have a timeline, and aren't ready to accept allowlist requests. Here's a sample staging certificate, and a site using it: abadcafe.txt (3.0 KB) https://[2602:ff3a:1:abad:c0f:fee:abad:cafe]/ Please speak up if you see anything interesting, weird, or wrong! I think I already found a bug in Firefox's display of IP address SANs; BZ #1973855. 9 Likes Osiris June 24, 2025, 11:16pm 2 Lol, also a bug in Discourse I guess? The URL is blue, but it's just a <a>...</a> without the href= part et cetera.. So an anchor, yes, but hyperlink? No.. Anyway, gotta get myself on that shortlived profile somehow How can I make my browser NOT follow the 302 redirect? Whilst being funny, the whole Starbucks thing, I cannot check the certificate in the browser due to the redirect Also: is it allowed to have IP addresses as a dnsName in the SAN? That's kinda weird, right? But in this case it's just a valid FQDN.. Interesting And confusing! Valid hex only character domain names should be forbidden 3 Likes It should be an IP SAN type. This would be IP.# in OpenSSL, not DNS.#. A related post: Hi, I issued an SSL certificate with and FQN, hostname and IP in the Subject Alternative Name extension. It’s working okay if I either use the FQDN or the hostname in the browser to connect to the console, but I get this meesage: Your... Reading time: 2 mins 🕑 Likes: 2 ❤ 3 Likes Osiris: Lol, also a bug in Discourse I guess? The URL is blue, but it's just a <a>...</a> without the href= part et cetera.. So an anchor, yes, but hyperlink? No.. Oof! That does look like a Discourse limitation. Good point, thanks! I've just replaced the redirect with a static...