Checking Your Region and Domain for SSL Compatibility
If you are having problems issuing an SSL certificate and get 'Invalid CSR' as an error message, there is a chance that either your street address or domain extension falls within the list of restricted countries.
SSL certificates that are issued by Sectigo or Symantec must comply with United States regulations and laws, including international sanctions. Please review the chart below to see if your domain or street address is found to be in a restricted country:
| TLD | Country |
|---|---|
| .AF | Afghanistan |
| .CU | Cuba |
| .ER | Eritrea |
| .GN | Guinea |
| .IQ | Iraq |
| .IR | Iran, Islamic Republic of |
| .KP | Korea, Democratic People's Republic of |
| .LR | Liberia |
| No TLD | North Cyprus |
| .RW | Rwanda |
| .SD,.SS | Sudan |
| .SL | Sierra Leone |
| .SY | Syrian Arab Republic |
| .ZW | Zimbabwe |
Not all SSL certificates involve such restrictions. If you are looking to secure your website with an SSL certificate, you can still issue a new certificate using Let's Encrypt.
For those using our hosting services, the certificate is issued automatically. It can be managed within the hosting panel by clicking "Lets Encrypt".