I am using an ACME server other than Let's Encrypt, and I observe PVE is having issues creating the CSR for IP addresses.
Depending of the order of the domains (the actual domain and the IP) to be verified I add in the GUI to be verified it creates a bad CSR that is not accepted by the ACME...