# Rate Limit for Short-lived Certificate's Exactly Set of Identifiers

**URL:** <https://community.letsencrypt.org/t/rate-limit-for-short-lived-certificates-exactly-set-of-identifiers/243649>\
**Category:** Issuance Policy\
**Created:** [December 6, 2025, 5:52pm UTC](https://community.letsencrypt.org/t/rate-limit-for-short-lived-certificates-exactly-set-of-identifiers/243649 "2025-12-06T17:52:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ZeroClover](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/zeroclover/32/89736_2.png) [@ZeroClover](https://community.letsencrypt.org/u/ZeroClover)\
**Post date:** [December 6, 2025, 5:52pm UTC](https://community.letsencrypt.org/t/rate-limit-for-short-lived-certificates-exactly-set-of-identifiers/243649/1 "2025-12-06T17:52:34Z")

</div>

When I was testing the compatibility between Short-lived Profile and various ACME clients, I forgot to change the client’s default renewal window (30 days before expiry). As a result, it ended up issuing a new certificate every day, and today I hit a 429 error. After checking the logs, I realized I’d run into the _New Certificates per Exact Set of Identifiers_ rate limit. Since this ACME client doesn’t support ARI yet, I’m not sure whether ARI could be used to work around this limit.

At the same time, it’s also worth considering that short-lived certificates will, by design, be reissued multiple times within 7 days. So should there perhaps be a separate rate limit policy specifically for short-lived certs?

---

<div class="post-metadata">

**Author:** ![mcpherrinm](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/mcpherrinm/32/59604_2.png) [@mcpherrinm](https://community.letsencrypt.org/u/mcpherrinm)\
**Post date:** [December 6, 2025, 5:58pm UTC](https://community.letsencrypt.org/t/rate-limit-for-short-lived-certificates-exactly-set-of-identifiers/243649/2 "2025-12-06T17:58:49Z")

</div>

We are considering how this limit interacts with 7-day certificates, yes.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [January 5, 2026, 5:59pm UTC](https://community.letsencrypt.org/t/rate-limit-for-short-lived-certificates-exactly-set-of-identifiers/243649/3 "2026-01-05T17:59:28Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.