# unable to generate a certificate for the domains \[traefik-docker\]

**URL:** <https://community.traefik.io/t/unable-to-generate-a-certificate-for-the-domains-traefik-docker/29879>\
**Category:** Traefik v3 (latest)\
**Tags:** docker\
**Created:** [May 14, 2026, 8:20pm UTC](https://community.traefik.io/t/unable-to-generate-a-certificate-for-the-domains-traefik-docker/29879 "2026-05-14T20:20:39Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vladimir](https://avatars.discourse-cdn.com/v4/letter/v/94ad74/32.png) [@Vladimir](https://community.traefik.io/u/Vladimir)\
**Post date:** [May 14, 2026, 8:20pm UTC](https://community.traefik.io/t/unable-to-generate-a-certificate-for-the-domains-traefik-docker/29879/1 "2026-05-14T20:20:39Z")

</div>

When I run `docker logs traefik`

I see a lot of errors like this:  
`2026-05-13T08:39:35Z ERR Unable to obtain ACME certificate for domains error="unable to generate a certificate for the domains [traefik-docker]: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Invalid identifiers requested :: Cannot issue for \"traefik-docker\": Domain name needs at least one dot" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["traefik-docker"] providerName=myresolver.acme routerName=websecure-traefik-docker@docker rule=Host(traefik-docker)`

How do i solve this?  
My traefik configuration (docker compose):

```auto
services:
    traefik:
        image: "traefik:v3.6"
        container_name: "traefik"
        restart: always
        command:
            - "--providers.docker=true"
            - "--providers.docker.exposedbydefault=false"
            - "--entrypoints.web.address=:80"
            - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
            - "--entrypoints.websecure.address=:443"
            - "--entrypoints.websecure.http.tls.certResolver=myresolver"
            - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
            - "--certificatesresolvers.myresolver.acme.email=webmaster@qrcode.expert"
            - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
            - "--entrypoints.websecure.http.middlewares=no-www"
        ports:
            - "80:80"
            - "443:443"
        volumes:
            - "/var/run/docker.sock:/var/run/docker.sock:ro"
            - "./volumes/letsencrypt:/letsencrypt"
        labels:
            - "traefik.enable=true"
            - "traefik.http.middlewares.no-www.redirectregex.regex=^https://www\\.(.+)$"
            - "traefik.http.middlewares.no-www.redirectregex.replacement=https://$1"
            - "traefik.http.middlewares.no-www.redirectregex.permanent=true"
    qrcode.frontend:
        image: qrcode.frontend:latest
        restart: always
        volumes:
            - ./volumes/logs:/logs
        labels:
            - "traefik.enable=true"
            - "traefik.http.routers.qrcode-frontend.rule=Host(`qrcode.expert`) || Host(`www.qrcode.expert`)"
            - "traefik.http.routers.qrcode-frontend.priority=10"
            - "traefik.http.routers.qrcode-frontend.middlewares=qrcode-frontend-compress"
            - "traefik.http.middlewares.qrcode-frontend-compress.compress=true"

```

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [May 15, 2026, 11:57am UTC](https://community.traefik.io/t/unable-to-generate-a-certificate-for-the-domains-traefik-docker/29879/2 "2026-05-15T11:57:18Z")

</div>

You set

> [@Vladimir](#):
>
> ```auto
> labels:
> - "traefik.enable=true"
> 
> ```

but have no `.rule=Host()` on the service/container.

---

<div class="post-metadata">

**Author:** ![Vladimir](https://avatars.discourse-cdn.com/v4/letter/v/94ad74/32.png) [@Vladimir](https://community.traefik.io/u/Vladimir)\
**Post date:** [May 15, 2026, 1:11pm UTC](https://community.traefik.io/t/unable-to-generate-a-certificate-for-the-domains-traefik-docker/29879/3 "2026-05-15T13:11:51Z")

</div>

Should I set `traefik.enable=false`? Won't it break my http-\>https redirect middleware?

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [May 17, 2026, 8:53am UTC](https://community.traefik.io/t/unable-to-generate-a-certificate-for-the-domains-traefik-docker/29879/4 "2026-05-17T08:53:00Z")

</div>

Not sure. Test it and report back 🙂

If it does not work, you could place the middleware on another container or place it in a dynamic config file, read by `providers.file`.

---

<div class="post-metadata">

**Author:** ![Vladimir](https://avatars.discourse-cdn.com/v4/letter/v/94ad74/32.png) [@Vladimir](https://community.traefik.io/u/Vladimir)\
**Post date:** [May 26, 2026, 8:57pm UTC](https://community.traefik.io/t/unable-to-generate-a-certificate-for-the-domains-traefik-docker/29879/5 "2026-05-26T20:57:17Z")

</div>

I just needed this line in the labels section:

```auto
            - "traefik.http.routers.no-www.tls.domains="

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/containo/original/2X/b/bd81ebdb578656e76e56ff3cc3eed021d3ba132d.png) [@system](https://community.traefik.io/u/system)\
**Post date:** [May 29, 2026, 8:57pm UTC](https://community.traefik.io/t/unable-to-generate-a-certificate-for-the-domains-traefik-docker/29879/6 "2026-05-29T20:57:52Z")

</div>

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.