Lockout from failed attempts

Help
3

Hi @corygstuart

that's 5 failed / per hour - limit. So one hour later, you can try it again.

But there is a new certificate ( https://check-your-website.server-daten.de/?q=armsso.ornl.gov#ct-logs ):

Issuer not before not after Domain names LE-Duplicate next LE
Let's Encrypt Authority X3 2019-07-01 2019-09-29 armsso.ornl.gov - 1 entries duplicate nr. 1

And you use it:

Domainname Http-Status redirect Sec. G
• http://armsso.ornl.gov/
128.219.248.24 302 http://armsso.ornl.gov/login 0.250 D
• http://armsso.ornl.gov/login 200 0.510 H
• https://armsso.ornl.gov/
128.219.248.24 302 https://armsso.ornl.gov/login 1.436 B
• https://armsso.ornl.gov/login 200 1.170 B 
CN=armsso.ornl.gov
	01.07.2019
	29.09.2019
expires in 89 days	armsso.ornl.gov - 1 entry

Didn't checked your other domain, but this domain works.

PS: You don't have a redirect http -> https. So if you use the http version, it's insecure.