证书绑定域名的网站限制境外 IP 访问，由于国际证书的 CA 机构基本是境外机构，CA 机构无法进行文件扫描审核，会导致证书签发失败。

可将 CA 审核侧 IP 地址加入访问白名单，证书颁发完成或域名信息审核通过后，文件和目录即可清除。 

Xinnet 验证 IP 白名单：

101.89.87.34 
8.146.209.70 
101.43.128.119
8.137.56.95 
43.136.173.110
8.162.2.5 
8.148.67.87 
43.198.16.91
18.167.69.134
52.78.115.243
13.209.198.41
52.82.97.93 
69.235.167.224
54.189.196.217

Sectigo 验证 IP 白名单: 

91.199.212.132
91.199.212.133
91.199.212.148
91.199.212.151
91.199.212.176
91.212.12.132
54.189.196.217 

Digicert（SecureSite、geotrust）验证 IP 白名单: 

216.168.249.9
216.168.240.4
216.168.247.9
202.65.16.4
54.185.245.130
13.58.90.0
52.17.48.104
18.193.239.14
54.227.165.213
54.241.89.140
54.189.196.217

GlobalSign 验证 IP 白名单: 

52.64.70.230
15.156.151.97
63.176.81.153
16.16.130.86
18.205.30.124
54.215.173.133
54.189.196.217

CFCA 验证 IP 白名单： 

1.202.139.200 

210.74.41.60 

TrustAsia 验证 IP 白名单: 

101.89.87.34 
8.146.209.70 
101.43.128.119
8.137.56.95 
43.136.173.110
8.162.2.5 
8.148.67.87 
43.198.16.91
18.167.69.134
52.78.115.243
13.209.198.41
52.82.97.93 
69.235.167.224
54.189.196.217

Certum 验证 IP 白名单 ：

194.126.216.17 

213.222.200.26 

213.222.201.98 

213.222.198.98 

162.19.137.235 

51.75.171.139 

54.189.196.217

万维信（SHECA）验证 IP 白名单：

47.100.86.120

8.130.80.171

47.109.106.174

47.83.235.76

47.237.160.193

47.251.122.19

至少配置 4 个