We are facing issue when renewing the ACME Lets encrypt certificate on Exprewway E server. We got the following error "ACME sign operation failed: The request exceeds a rate limit: letsencrypt.org"
We already upgraded the Expressway server to the latest version to support the new EKU Changes.
The certificates are already expired and need immediate help.
I received the following output when trying to renew the certificate:
CodeLocation="helpers(200)" Detail="Certbot StdOut< Requesting a certificate for vmbexpe.stjohnsbank.com and collab-edge.stjohnsbank.com >EndStdOut"CodeLocation="helpers(200)" Detail="Acme Sign Command Failed: The request exceeds a rate limit: letsencrypt.org" Code="500"
My server is Expressway and version is : 15.5
The operating system my web server runs on is (include version): Linux
I can login to a root shell on my machine (yes or no, or I don't know): Yes
Exceeding a rate limit typically only happens after prior unsuccessful issuance attempts. Check in the logs for other errors relating to ACME in case there's something to fix. Otherwise you just need to wait for the rate limit to refill as documented at Rate Limits - Let's Encrypt.
Edit: You appear to be blocking TCP port 80 (HTTP), access to this port is required for the HTTP-01 validation method. Are you using another validation method?
I can see from the public CT logs that you got 5 certs for those two domain names in the past 2 days. There is a rate limit of 5 identical certs in the past week. The Let's Encrypt Server would have sent a specific error about this. Perhaps the Expressway logs would show more details. That rate limit allows one additional every 34 hours. See this specific topic in the Rate Limit page that Max showed: Rate Limits - Let's Encrypt
In any case, you were not having a problem getting certs. But, your system for some reason thought you needed more. Or, maybe you forced extra attempts because your system did not apply the new certs to your system correctly.
We would need more details about why your system did not use one of these 5 recently issued certs. But, that is probably better asked of Expressway tech support.