You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
--force no longer forces domain name revalidation by default, a new argument --force-validation has been added for that
Added support for EC secp521r1 algorithm (works with e.g. zerossl)
EC PARAMETERS are no longer written to privkey.pem (didn't seem necessary and was causing issues with various software)
Fixed
Requests resulting in badNonce errors are now automatically retried (fixes operation with LE staging servers)
Deprecated egrep usage has been removed
Added
Implemented EC for account keys
Domain list now also read from domains.txt.d subdirectory (behaviour might change, see docs)
Implemented RFC 8738 (validating/signing certificates for IP addresses instead of domain names) support (this will not work with most public CAs, if any!)