How to access issued certificates for a given domain


#1

How can i view my current issued certificates for a domain?

https://crt.sh/?Identity=%davidak.de&iCAID=7395

shows certificates that expired on 2016-05-21.

Does that mean +1 for every subsub domain like sub.sub.sub.domain.net (+4)?


Cannot renew certificate "too many requests"
#2

No, the resource that’s rate-limited is certificates, not number of (sub)domains on a certificate.

  • If you issue one certificate with 10 subdomains of example.com (independent of the “depth” of those subdomains), your rate limit for example.com sits at 1.
  • If you issue 10 separate certificate for each of those 10 subdomains of example.com, the rate limit for example.com sits at 10.

crt.sh shows one certificate for your domain in the last 7 days, so you should be fine.

(Note: there’s a separate limit of 100 subdomains per certificate, but that’s mostly to prevent certificates from becoming too big - 100 is what most providers using shared SAN certificates settle on, for example.)


#3

Thanks for the fast response.

Here i see all certificates.

https://crt.sh/?q=%davidak.de

Something is going on there.

I should use the test ca.


#4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.