[RFC8738] ACME IP Identifier Validation Extension

[bavshin-f5]

Feature Overview

Support ordering certificates with IP address SAN entries and authorizing identifiers with type ip, as specified in RFC8737,

This extension was recently deployed by the Let's Encrypt. Their implementation requires ACME Profiles Extension support (#4) from the client and is limited to the "shortlived" profile with certificates issued for 160 hours.

Alternatives Considered

No response

Additional Context

RFC8738 introduces an additional serverName decoding step to the TLS-ALPN-01 Challenge.