The subnet masks in the CA docs did not make sense, as they allowed only issuance of non-routable all-0s addresses. Changed to masks corresponding to /0 prefixes, and changed from permitted to excluded as using DNS names should be preferred over IP addresses.
joostd
commented
5 months ago
The subnet masks in the CA docs did not make sense, as they allowed only issuance of non-routable all-0s addresses. Changed to masks corresponding to /0 prefixes, and changed from permitted to excluded as using DNS names should be preferred over IP addresses.