When I was testing the compatibility between Short-lived Profile and various ACME clients, I forgot to change the client’s default renewal window (30 days before expiry). As a result, it ended up issuing a new certificate every day, and today I hit a 429 error. After checking the logs, I realized I’…

Rate Limit for Short-lived Certificate's Exactly Set of Identifiers

mcpherrinm December 6, 2025, 5:58pm 2

We are considering how this limit interacts with 7-day certificates, yes.

5 Likes