"detail": "Error creating new cert :: too many certificates already issued for: sp.gov.br"

[asp.gabriel]

Please fill out the fields below so we can help you better.

My domain is:
sf.prefeitura.sp.gov.br

I ran this command:
certbot certonly --manual --preferred-challenges=dns --cert-name fldmod02.sf.prefeitura.sp.gov.br -d fldmod02.sf.prefeitura.sp.gov.br

It produced this output:
{
“type”: “urn:acme:error:rateLimited”,
“detail”: “Error creating new cert :: too many certificates already issued for: sp.gov.br”,
“status”: 429
}

My web server is (include version):
Server version: Apache/2.4.6 (CentOS)

The operating system my web server runs on is (include version):
CentOS7.x86_64

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):
yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
no

[mnordhoff]

Currently, Let's Encrypt considers sp.gov.br a single domain (like, for example, google.com.br), so it is rate limited to 20 new certificates per week.

This was fixed earlier today; Let's Encrypt will probably deploy updated software in the next couple weeks.

Until then, there's nothing you can do except retry occasionally and hopefully get a certificate in under the rate limit. You can use lectl or some other Certificate Transparency log monitor to calculate when the next chance is, but someone else could still beat you to the punch.

Previous thread:

Too many certificates for SP.GOV.BR

H…