Entrust failure to issue when "lifetime" is specified

1

I am new to ACME and Certify The Web.

I have Certify The Web setup and functional for a new certificate from Entrust, which was issued and automatically bound to the IIS site specified.

The issue I did run into is if I specify any “lifetime” within the interface, the request and issuing process would fail. Log details follow.

----------- Log details -----------
[WRN] Fail to load resource from ‘https://acme.entrust.net/acme2/new-order’.
urn:ietf:params:acme:error:serverInternal: Unexpected server error
[ERR] urn:ietf:params:acme:error:serverInternal :: Unexpected server error

The process only worked if the lifetime field was left blank. This resulted in a 90 day certificate getting issued.

Thoughts around this?

2

Thanks, it’s a limitation of the ACME protocol that the app cannot determine the feature set of a particular CA in advance, so we basically have no control over that.

We include a warning about this issue in the UI:

image