An order is a state machine
01An order becomes ready only after its required authorizations are satisfied.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 7.1.6 ↗
RFC 8555 · § 7.1.6EXAMPLE
3 / 3
03
processing → valid
Submit the CSR, then wait for issuance and a certificate URL.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
RFC 8555 HTTP/DNS challengesRFC 8737 § 3
A later companion specification adds tls-alpn-01, a dedicated TLS challenge using the acme-tls/1 ALPN identifier; it does not replace ACME.
Read the updated RFC section ↗An account key authenticates the ACME client.
- An account key authenticates the ACME client.
- Orders describe requested identifiers and link authorizations.
- A certificate is issued only after the server accepts the required validation and finalization.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy