Limitations to number of allowed certs to be installed under a single IP

Feature Requests
1

Hello Team, We have 500+ domains hosted in one single server with single IP address. Can we install Letsencrypt SSL for all those 500+ domains with Single IP address. Whats the maximum number of allowed certificates for a single IP.
Thanks.

2

Yes.

There isn't one. :slight_smile:

(Well... some of the API endpoints are limited to 20 HTTP requests per second.)

Depending on your ACME client design, you may run into issues with some of the rate limits (like pending authorizations, or account registrations) but they can be worked around.

1 Like
3

Thanks @mnordhoff for the update. So I can install certs for 100 domains (Different domainname pointing to same server same IP) in one day. I have gone through the links you provided and its mentioned that "The main limit is Certificates per Registered Domain (20 per week). " This is installing certs for a single domain name, right? Limited to install not more than 20certs for one particular domain name.

4

Right. 20 certificates per domain (e.g. letsencrypt.org or google.com). But you can issue certificates for thousands of different domains just fine.

If you issue a single certificate for multiple domains, it counts once for each one. E.g. if you created 1 certificate for the 4 names example.com, www.example.com, example.net, www.example.net, it would count once for example.com and once for example.net.

The Certificates per Registered Domain rate limit is mainly a problem when someone wants to create new certificates adding or removing subdomains several times a day, or create certificates for thousands of subdomains of the same domain.

It sounds like the rate limits should be fine for you.

1 Like
5

Thanks for the detailed information @mnordhoff

6

Yes, if the domains are all different domains, there is no limit at all to the number of different certificates you can obtain. You can literally obtain 1,000,000 certificates in one day, as has actually been done before.

But if one certificate mentions subdomain.example.com and another mentions other.example.com, you can only get 20 certificates per week like that. Each of those certificates could cover 100 different names (whether example.com subdomains or other names or a combination of the two).

7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.