New rate limit question

[jsha]

@xrobau

Because I like scalability, I deploy one new machine per day, with the FQDN of {{random uuid}}.superawesomedns.com

@xrobau

Because I'm not hitting the 20 hosts per week, that should be fine?

Yep, in this scenario you would be able to issue a new cert every day indefinitely, and renew them all indefinitely.

[jonathanvaughn]

If the rate limit is 20 new domains per week, is that really 20 new combinations of domains? I.e., can we request a SAN SSL for 99 domains all at once in the same request? And if so, can we then request 19 more SANs in the same week?

[serverco]

@jonathanvaughn

If the rate limit is 20 new domains per week, is that really 20 new combinations of domains?

Note this is 20 certificates per single domain per week.

That single domains includes subdomains. so separate certificates for "sub1.example.com" and "sub2.example.com" count against that limit.

certificates for "domain1.com" and "domain2.com" are separate domains, so that would could separately as 1/20 against domain1.com and 1/20 against domain2.com.

@jonathanvaughn

can we request a SAN SSL for 99 domains all at once in the same request? And if so, can we then request 19 more SANs in the same week?

Yes, you can create cert with "sub1.d1.com", "sub2.d1.com" .... "sub99.d1.com" on one certificate and then "sub100.d1.com" ... "sub199.d1.com" on the second cert ( up to 19 certs that week).