AutoSSL failed to create a new certificate order because the server’s Let’s Encrypt account has reached a rate limit

[indiglow]

Multiple domain. Most important are distantia-srv2.com and carleford.com

This server is running cPanel and uses Let's Encrypt with AutoSSL. There was a problem with our certificates today and the server re-issued the certificates multiple times. We are now blocked. The multiple certificate request were caused by a problem on the server that should now be fixed, but we need the certificates to be issued one last time. Has said earlier, there is ~ 20 set of domains that we get that error on. Do you need a full list? Here's the full error messsage for 1 set of domains:

WARN AutoSSL failed to create a new certificate order because the server’s Let’s Encrypt account (https://acme-v02.api.letsencrypt.org/acme/acct/221152620) has reached a rate limit. (429 urn:ietf:params:acme:error:rateLimited (The request exceeds a rate limit) (Error creating new order :: too many certificates (5) already issued for this exact set of domains in the last 168 hours: cdn.distantia-srv2.com,distantia-srv2.com,mail.distantia-srv2.com,www.cdn.distantia-srv2.com,www.distantia-srv2.com: see Rate Limits - Let's Encrypt)) You may contact Let’s Encrypt to request a change to this rate limit.

Thank you very much for your time.

• Alex

[schoen]

Hi @indiglow,

Certificate issuance uses server resources, and Let's Encrypt does not have a manual override.

I've previously proposed that there should be gradual rate limits so that people who didn't know there were any rate limits won't be surprised and then immediately have to wait a week. Unfortunately, I don't think the more gradual rate limits have been instituted yet.

You can learn more about the rate limits at

Rate Limits - Let's Encrypt

Your best option is probably to change the list of domains that will be covered by the certificate (adding or removing a name), which causes the rate limit calculation to be performed differently. Alternatively, you could wait for one week, or try a different ACME certificate authority.