Skip to content

Any successfully issued a free cert with ssl.com? #6660

@lifeboy

Description

@lifeboy

I'm trying to issue a new cert with them but get the following error:

/root/.acme.sh/acme.sh --issue -d poc.fast.za.net --post-hook "/root/restart-after-cert-update.sh" --server ssl.com --force --staging --test --dns dns_miab --dnssleep 0

[Thu Dec 4 16:36:38 SAST 2025] Using CA: https://acme.ssl.com/sslcom-dv-ecc
[Thu Dec 4 16:36:39 SAST 2025] Single domain='poc.fast.za.net'
[Thu Dec 4 16:36:43 SAST 2025] Getting webroot for domain='poc.fast.za.net'
[Thu Dec 4 16:36:43 SAST 2025] Adding TXT value: Gj67Lqk5d4pirINAMwFZgbUy3IK8HdPD-Fk4B4UOQVg for domain: _acme-challenge.poc.fast.za.net
[Thu Dec 4 16:36:46 SAST 2025] TXT record added successfully
[Thu Dec 4 16:36:46 SAST 2025] The TXT record has been successfully added.
[Thu Dec 4 16:36:46 SAST 2025] Sleeping for 0 seconds to wait for the the TXT records to take effect
[Thu Dec 4 16:36:47 SAST 2025] Verifying: poc.fast.za.net
[Thu Dec 4 16:36:50 SAST 2025] poc.fast.za.net: Challenge error: {"detail":"MPIC failed.. CAA record does not include ssl.com which is required to issue the certificate. If you need assistance, please contact support@ssl.com","type":"urn:ietf:params:acme:error:incorrectResponse"}
[Thu Dec 4 16:36:50 SAST 2025] Removing DNS records.
[Thu Dec 4 16:36:50 SAST 2025] Removing txt: Gj67Lqk5d4pirINAMwFZgbUy3IK8HdPD-Fk4B4UOQVg for domain: _acme-challenge.poc.fast.za.net
[Thu Dec 4 16:36:53 SAST 2025] TXT record removed successfully
[Thu Dec 4 16:36:53 SAST 2025] Successfully removed
[Thu Dec 4 16:36:53 SAST 2025] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Thu Dec 4 16:36:53 SAST 2025] Running post hook: '/root/restart-after-cert-update.sh'

I contacted them via their webchat bot, which pointed out that CAA requirement for the domain, but that is present and replicated according to https://dnschecker.org/#CAA/poc.fast.za.net

The bot "Eva" referred me to a human, who doesn't seem to know about the service or what to do.

Anyone that has successfully done this?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions