5 days or can inport from old/

hey there i had a hard drive go down on my so i re set every think back up and im geting this erro about

An unexpected error occurred:
There were too many requests of a given type :: Error creating new order :: too many certificates already issued for exact set of domains: www.davisworthing.co.uk: see https://letsencrypt.org/docs/rate-limits/

but i got wait 5 days to get my website back up a running is there a way to download certificates and re in port them from here

https://crt.sh/?id=1593274834

Hi @daz1982

you have created 5 identical certificates ( https://check-your-website.server-daten.de/?q=davisworthing.co.uk#ct-logs ):

CertSpotter-Id Issuer not before not after Domain names LE-Duplicate next LE
975216499 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-19 12:19:07 2019-09-17 12:19:07 www.davisworthing.co.uk - 1 entries duplicate nr. 5 next Letsencrypt certificate: 2019-06-26 11:23:22
975150363 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-19 12:04:31 2019-09-17 12:04:31 www.davisworthing.co.uk - 1 entries duplicate nr. 4
975148730 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-19 12:03:59 2019-09-17 12:03:59 www.davisworthing.co.uk - 1 entries duplicate nr. 3
975102812 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-19 11:36:46 2019-09-17 11:36:46 www.davisworthing.co.uk - 1 entries duplicate nr. 2
975079291 CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US 2019-06-19 11:23:22 2019-09-17 11:23:22 www.davisworthing.co.uk - 1 entries duplicate nr. 1

So normally you have to wait - 2019-06-26. But that's not really a problem.

Because you have created the wrong certificate.

You have two dns entries

Host T IP-Address is auth. ∑ Queries ∑ Timeout
davisworthing.co.uk A 62.30.119.161
Winchfield/Hampshire/GB yes 1 0
AAAA yes
www.davisworthing.co.uk A 62.30.119.161
Winchfield/Hampshire/GB yes 1 0
AAAA yes

that's good. So you should create one certificate with both domain names (non-www and www). That's a new set of domain names -> so it's not affected by that rate limit.

So create one certificate with both domain names and use that.

yh as i hade to move my set up to a nother ip

but when i try and creat the new one it give me this error

An unexpected error occurred:
There were too many requests of a given type :: Error creating new order :: too many certificates already issued for exact set of domains: www.davisworthing.co.uk: see https://letsencrypt.org/docs/rate-limits/
Please see

sudo certbot --apache --agree-tos --email weatherworthing@gmail.com --redirect --hsts -d www.davisworthing.co.uk

so yor saying just creat one like davisworthing.co.uk

That's

the wrong command, that creates a certificate with one domain name -> rate limit.

Add

-d davisworthing.co.uk

so one certificate with both domain names is created.

yep ive done that

and it saying this now

https://www.davisworthing.co.uk/

Please read my reply, I've wrote "add", not "replace".

You have replaced the -d command, now you have one certificate only with the non-www version ( https://check-your-website.server-daten.de/?q=davisworthing.co.uk ):

Domainname Http-Status redirect Sec. G
http://davisworthing.co.uk/
62.30.119.161 301 https://davisworthing.co.uk/ 0.123 A
http://www.davisworthing.co.uk/
62.30.119.161 200 0.447 H
https://davisworthing.co.uk/
62.30.119.161 200 1.153 I
https://www.davisworthing.co.uk/
62.30.119.161 200 0.846 N
Certificate error: RemoteCertificateNameMismatch

The certificate:

CN=davisworthing.co.uk
	24.06.2019
	22.09.2019
expires in 90 days	davisworthing.co.uk - 1 entry

Use both -d parameters - with www and with non-www.

Now your non-www is secure, your www version isn't.

sorry but can u right the comand out for me plz as im not very good off all this sorry?

sudo certbot --apache --agree-tos --email weatherworthing@gmail.com --redirect --hsts -d www.davisworthing.co.uk -d davisworthing.co.uk

1 Like

yep ive done that and it works thank you very much

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.