From a148d2ddfa60206f1a648dd7c9851e5921ea1805 Mon Sep 17 00:00:00 2001
From: Blake Griffith <blake.a.griffith@gmail.com>
Date: Fri, 17 Jun 2016 18:58:48 -0500
Subject: [PATCH] Limit domains to 255 octets.

---
 certbot/util.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/certbot/util.py b/certbot/util.py
index 9739e8d2f..301fc669b 100644
--- a/certbot/util.py
+++ b/certbot/util.py
@@ -431,7 +431,7 @@ def enforce_domain_sanity(domain):
     for l in labels:
         if not 0 < len(l) < 64:
             raise errors.ConfigurationError(msg + "label {0} is too long.".format(l))
-    if len(domain) > 256:
+    if len(domain) > 255:
         raise errors.ConfigurationError(msg + "it is too long.")
 
     return domain