Issue Adding Subdomains to Working SSL Certificate

Hello everyone,

I would like to share an underlying issue I've encountered with Let's Encrypt, stemming from my attempt to add new subdomains to my existing SSL certificate.

I successfully obtained an SSL certificate for my main domain, and it was functioning properly. However, when I tried to add new subdomains, I faced difficulties as the process didn't work as expected. Subsequently, I started encountering rate limit issues.

Is there someone with experience who can help me understand how to resolve this issue? Are there specific settings or steps I should take to expedite the rate limit reset and add the subdomains correctly?

I would greatly appreciate any assistance or advice on this matter.

Thank you very much in advance,

I ran this command: .acme.sh/acme.sh --issue -d domain.com -d www.domain.com -d sub1.domain.com -d www.sub2.domain.com -d sub2.domain.com -d www.sub2.domain.com -w /home/myusername/public_html --server letsencrypt

It produced this output:
[Mon Jul 8 18:23:39 EDT 2024] Domains have changed.
[Mon Jul 8 18:23:40 EDT 2024] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Mon Jul 8 18:23:40 EDT 2024] Multi domain='DNS:domain.com,DNS:www.domain.com,DNS:sub1.domain.com,DNS:www.sub1.domain.com,DNS:sub2.domain.com,DNS:www.sub2.domain.com'
[Mon Jul 8 18:23:42 EDT 2024] Create new order error. Le_OrderFinalize not found. {
"type": "urn:ietf:params:acme:error:rateLimited",
"detail": "Error creating new order :: too many failed authorizations recently: see Failed Validation Limit - Let's Encrypt",
"status": 429
}
[Mon Jul 8 18:23:42 EDT 2024] Please add '--debug' or '--log' to check more details.
[Mon Jul 8 18:23:42 EDT 2024] See: How to debug acme.sh · acmesh-official/acme.sh Wiki · GitHub

My web server is (include version): Namecheap

1 Like

Hi @Black01,

No, just wait.

Testing and debugging are best done using the Staging Environment as the Rate Limits are much higher.
There are also Failed Validation Limit - Let's Encrypt and Duplicate Certificate Limit - Let's Encrypt and Registrations Per IP Limit - Let's Encrypt

And to assist with debugging there is a great place to start is Let's Debug.

4 Likes

Hi @Black01
Maybe @Neilpang can help with this one.

3 Likes

Also @Black01 take a look at Adding domainnames (Alt Domain) with acme.sh - #3 by 9peppe

3 Likes

Thank you all guys.
I have created a separate certificate for each subdomain
I know it's not the perfect solution but I think is fine for now.
because I tried all the solutions and they didn't work.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.