I want to generate a proper certificate for iLO web console (iLO is a management engine for HP servers) using letsencrypt. AFAIK there's no way to install private key into iLO, so I've generated CSR from iLO. It contains the following field:
Requested Extensions: X509v3 Subject Alternative Name: DNS:ilo.example.com, IP Address:192.168.1.11
I've found no way to exclude IP Address part from CSR. I don't need it, I'll use only ilo.example.com. Now I issued
certbot certonly --manual --staging --preferred-challenges=dns --csr csr
command, completed DNS verification, but got error:
An unexpected error occurred: The request message was malformed :: Error creating new cert :: CSR contains one or more IP address fields Please see the logfiles in /var/log/letsencrypt for more details.
AFAIK CSR is signed by private key, so I can't edit it. Can I ask letsencrypt to ignore IP address and issue certificate only for ilo.example.com? Or is there other way?