national russian domain "рф" is "Name does not end in a public suffix"

[slavonnet]

./letsencrypt-auto-source/letsencrypt-auto --os-packages-only
./tools/venv.sh
source venv/bin/activate
certbot certonly --standalone -d eps-nfo.ru -d xn----itbzecmx.xn--p1ai -d xn----jtbwehmq.xn--p1ai -d www.xn----itbzecmx.xn--p1ai -d www.xn----jtbwehmq.xn--p1ai -d www.eps-nfo.ru -t --verbose

Received response <Response [400]> (headers: {'Content-Length': '109', 'Boulder-Request-Id': '5EHDj2LTgXncS9I5BmrpryYVa9nPoSeTx4Nxa0n1Ahw', 'Expires': 'Mon, 14 Nov 2016 08:38:54 GMT', 'Server': 'nginx', 'Connection': 'close', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Pragma': 'no-cache', 'Boulder-Requester': '283400', 'Date': 'Mon, 14 Nov 2016 08:38:54 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': '9me05HDU_Q6cfj5Suq1yOafskAPGr0U1xeL4nrvpkTQ'}): '{\n  "type": "urn:acme:error:malformed",\n  "detail": "Name does not end in a public suffix",\n  "status": 400\n}'
Exiting abnormally:
Traceback (most recent call last):
  File "/root/certbot/venv/bin/certbot", line 11, in <module>
    load_entry_point('certbot', 'console_scripts', 'certbot')()
  File "/root/certbot/certbot/main.py", line 778, in main
    return config.func(config, plugins)
  File "/root/certbot/certbot/main.py", line 564, in obtain_cert
    action, _ = _auth_from_domains(le_client, config, domains, lineage)
  File "/root/certbot/certbot/main.py", line 97, in _auth_from_domains
    renewal.renew_cert(config, domains, le_client, lineage)
  File "/root/certbot/certbot/renewal.py", line 238, in renew_cert
    new_certr, new_chain, new_key, _ = le_client.obtain_certificate(domains)
  File "/root/certbot/certbot/client.py", line 253, in obtain_certificate
    self.config.allow_subset_of_names)
  File "/root/certbot/certbot/auth_handler.py", line 68, in get_authorizations
    domain, self.account.regr.new_authzr_uri)
  File "/root/certbot/acme/acme/client.py", line 210, in request_domain_challenges
    typ=messages.IDENTIFIER_FQDN, value=domain), new_authzr_uri)
  File "/root/certbot/acme/acme/client.py", line 190, in request_challenges
    new_authz)
  File "/root/certbot/acme/acme/client.py", line 651, in post
    return self._check_response(response, content_type=content_type)
  File "/root/certbot/acme/acme/client.py", line 566, in _check_response
    raise messages.Error.from_json(jobj)
Error: urn:acme:error:malformed :: The request message was malformed :: Name does not end in a public suffix

An unexpected error occurred:
Error: urn:acme:error:malformed :: The request message was malformed :: Name does not end in a public suffix
Please see the logfiles in /var/log/letsencrypt for more details.

[cpu]

Hi @slavonnet

There is a known issue with Boulder's IDN support that prevents the issuance of certificates with an IDN suffix.

Unfortunately there isn't anything Certbot can do presently to fix this.