Please help install the Let's Encrypt certificate

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is: aikons.kz

I ran this command:

It produced this output: Invalid response from https://acme-v01.api.letsencrypt.org/acme/new-reg.
Details:
Type: urn:acme:error:rateLimited
Status: 429
Detail: Error creating new registration :: too many registrations for this IP: see https://letsencrypt.org/docs/rate-limits/

My web server is (include version):

The operating system my web server runs on is (include version): plesk

My hosting provider, if applicable, is: ps.kz

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): plesk

Invalid response from https://acme-v01.api.letsencrypt.org/acme/new-reg.
Details:
Type: urn:acme:error:rateLimited
Status: 429
Detail: Error creating new registration :: too many registrations for this IP: see https://letsencrypt.org/docs/rate-limits/

2

aikons.kz resolves as:
104.239.213.7
198.105.244.11
OR
Non-existent domain

depending on which global DNS service used.
This indicates DNS access or propagation issues.
You must ensure DNS is functional and up-to-date before proceeding.

Is probably misstated and really means:
Too many requests for this domain ("aikons.kz") - like too many pending authorizations and such.
You can review actual domain registrations at: crt.sh | %aikons.kz
Which appear normal.

3

update the title to include “PLESK”

1 Like
4

Tell me please How to do this?

5

Additionally and probably the root of your problem:
aikons.kz forwards to www.aikons.kz permanently (LE follows forwarding)
But www.aikons.kz resolves to:
2a00:5da0:1000::118
195.210.46.36

LE will prefer IPv6 when present and will not fall back to IPv4 if/when IPv6 fails.
You must ensure the IPv6 connections are valid or remove the AAAA entry from DNS.

6

click the pencil icon near the tittle - to edit it

7

You can create a maximum of 10 Accounts per IP Address per 3 hours. You can create a maximum of 500 Accounts per IP Range within an IPv6 /48 per 3 hours. Hitting either account rate limit is very rare, and we recommend that large integrators prefer a design using one account for many customers.

If you try again in a couple hours, it may work.

Most ACME clients will register once, and then reuse that account afterwards. If Plesk or the client you're using work that way, this won't be a problem again.

8

In the plesk panel? But I do not see a pencil!

9

Maybe PLESK is deleting the entire account when the cert issuance fails and there is no other reason to keep it.
…a victim of its’ own process…

Ten per three hours would be about eighteen minutes apart.
A reasonably short time to wait to try again.
Or just use STAGING until you get it right.

10

There are 3 domains on my hosting. On one of them works letencrypt. Others do not. This error occurs. How can I reset this list https://crt.sh/?q=%aikons.kz?

11

Hi,

You can’t reset the list, the only thing you can is wait 7 days till the certificate issuerance cycle refresh, and try again.

Thank you

12

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.