Getting rate limits but create only three cert at week

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
getfotge.io
I ran this command:
certbot-auto certonly --agree-tos --webroot --webroot-path ‘/tmp/’ --force-renewal --non-interactive -d
It produced this output:
An unexpected error occurred:
There were too many requests of a given type :: Error creating new cert :: too many certificates already issued for: getforge.io
My web server is (include version):
nginx/1.10.3
The operating system my web server runs on is (include version):
Linux
My hosting provider, if applicable, is:
self
I can login to a root shell on my machine (yes or no, or I don’t know):
yes
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):no

Hi @scorpius626 - You say in the thread title that you're only getting three certificates a week, but I see many more in the Certificate Transparency logs.

Have you reviewed the rate limit documentation? The section that covers your case is:

The main limit is Certificates per Registered Domain, (20 per week). A registered domain is, generally speaking, the part of the domain you purchased from your domain name registrar. For instance, in the name www.example.com, the registered domain is example.com. In new.blog.example.co.uk, the registered domain is example.co.uk. We use the Public Suffix List to calculate the registered domain.

It appears that some of those must be renewals, based on the number issued in one day. Scorpius, please note that renewals, while exempted from the rate limit, still count against it. As such, you’ll want to perform any new issuances before performing renewals. This takes some careful planning, and I know Let’s Encrypt is working on making this more pleasant, but that’s where it stands now.

2 Likes

Well this is weird:
https://crt.sh/?q=getfotge.io
https://crt.sh/?q=www.getfotge.io
https://crt.sh/?q=%getfotge.io
are all empty!

[EDIT] TYPO in the original post.

You are right, all these certificates were created with renew, so I need to more carefully choose the day when to update the certificates, thank you

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.