50 crts limit increased?

Feature Requests
1

We are seeing today that after the latest outage, the limit of 50 certificates per week for one domain and its subdomains does not work. More than 80 certificates have already been issued. Has the limit increased or is this a targeted failure?

2

I don't understand what you're talking about.

An outage should not impact that ratelimit, nor should it require you to reissue certificates.

3 Likes
3

Max limit for 1 domain&subs for a week - 50 crts, but we can do more, is it ok?

4

You can request a rate limits exception, somewhere in the docs or on the rate limits page it should tell you how to ask.

3 Likes
5

It works without request and it didn't work like that before

6

Welcome to the Let's Encrypt Community, @yu.zarayskaya! :slightly_smiling_face:

The main limit is Certificates per Registered Domain (50 per week). A registered domain is, generally speaking, the part of the domain you purchased from your domain name registrar. For instance, in the name www.example.com, the registered domain is example.com. In new.blog.example.co.uk, the registered domain is example.co.uk. We use the Public Suffix List to calculate the registered domain. Exceeding the Certificates Per Registered Domain limit is reported with the error message too many certificates already issued, possibly with additional details.

However...

Renewals are treated specially: they don’t count against your Certificates per Registered Domain limit, but they are subject to a Duplicate Certificate limit of 5 per week. Exceeding the Duplicate Certificate limit is reported with the error message too many certificates already issued for exact set of domains.

A certificate is considered a renewal (or a duplicate) of an earlier certificate if it contains the exact same set of hostnames (SANs), ignoring capitalization and ordering of hostnames. For instance, if you requested a certificate for the names [www.example.com, example.com], you could request four more certificates for [www.example.com, example.com] during the week.

5 Likes
7

Please read (and re-read) the rate limits documentation

The 50 per domain per week is only for new names being added, not for renewals. If you're expecting to onboard more subdomains than that, then there is a form to request a higher limit linked there.

Also, with that large an integration, be sure to read the Integration Guide

5 Likes
8

Are you including the pre-certificates in your count?

3 Likes
9

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.