I’ve installed cyberpanel which automatically generates ssl certificate for hosted websites via let’s encrypt.
The issue is, whenever i try issuing ssl certificate for the domain it gives an error “rate limits exceeded”, I’ve read this : https://letsencrypt.org/docs/rate-limits/ & i don’t know how much time do i exactly need to wait so that i can generate a new one.
Any help regarding this would be very appreciated, i need to fix it ASAP.
Thank you in advacne.
Hi,
Is there any detailed message regarding rate limits?
What limit have been exceeded?
And, why do you skip the default form?
Thank you
this is the full error message,
Cannot issue SSL. Error message: [Thu May 23 01:44:32 UTC 2019] www.heyheyhey.com:Verify error:dns :: DNS problem: NXDOMAIN looking up A for www.heyheyhey.com [Thu May 23 01:44:32 UTC 2019] Please add ‘–debug’ or ‘–log’ to check more details. [Thu May 23 01:44:32 UTC 2019] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh [Thu May 23 01:44:34 UTC 2019] Create new order error. Le_OrderFinalize not found. { “type”: “urn:ietf:params:acme:error:rateLimited”, “detail”: “Error creating new order :: too many certificates already issued for exact set of domains: heyheyhey.com: see https://letsencrypt.org/docs/rate-limits/”, “status”: 429 } [Thu May 23 01:44:34 UTC 2019] Please add ‘–debug’ or ‘–log’ to check more details. [Thu May 23 01:44:34 UTC 2019] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh 0,283 Failed to obtain SSL for domain. [issueSSLForDomain]
Hi @wire
looks like this isn't your real domain name. Please share your real domain name. heyheyhey.com doesn't have any certificate.
There is a new check of your domain - https://check-your-website.server-daten.de/?q=wiremicrosystems.com
There you see the problem - Grade R:
You don't have a www DNS entry:
| Host | T | IP-Address | is auth. | ∑ Queries | ∑ Timeout |
|---|---|---|---|---|---|
| wiremicrosystems.com | A | 138.68.124.129 | yes | 1 | 0 |
| AAAA | yes | ||||
| www.wiremicrosystems.com | Name Error | yes | 1 | 0 |
But your non-www redirects to your not defined www version:
| Domainname | Http-Status | redirect | Sec. | G |
|---|---|---|---|---|
| • http://wiremicrosystems.com/ | ||||
| 138.68.124.129 | 301 | http://www.wiremicrosystems.com/ | 0.033 | D |
| • http://www.wiremicrosystems.com/ | -1 | 0.014 | R | |
| NameResolutionFailure - The remote name could not be resolved: 'www.wiremicrosystems.com' | ||||
| • https://wiremicrosystems.com/ | ||||
| 138.68.124.129 | 301 | http://www.wiremicrosystems.com/ | 0.157 | F |
| • http://wiremicrosystems.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | ||||
| 138.68.124.129 | 301 | http://www.wiremicrosystems.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | 0.040 | D |
| Visible Content: 301 Moved Permanently The document has been permanently moved to here . Proudly powered by LiteSpeed Web Server Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content found on this site. | ||||
| • http://www.wiremicrosystems.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de | -1 | 0.010 | R | |
| NameResolutionFailure - The remote name could not be resolved: 'www.wiremicrosystems.com' | ||||
| Visible Content: |
So first step: Create the DNS A record of the www version with the same ip address.
You have created 5 identical certificates
| CertSpotter-Id | Issuer | not before | not after | Domain names | LE-Duplicate | next LE |
|---|---|---|---|---|---|---|
| 922833826 | CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester | 2019-05-21 00:00:00 | 2019-08-19 23:59:59 | wiremicrosystems.com, www.wiremicrosystems.com | ||
| 2 entries | ||||||
| 919931878 | CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US | 2019-05-19 09:11:12 | 2019-08-17 09:11:12 | wiremicrosystems.com | ||
| 1 entries | duplicate nr. 5 | next Letsencrypt certificate: 2019-05-25 05:27:54 | ||||
| 918104691 | CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US | 2019-05-18 05:33:46 | 2019-08-16 05:33:46 | wiremicrosystems.com | ||
| 1 entries | duplicate nr. 4 | |||||
| 918100486 | CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US | 2019-05-18 05:29:55 | 2019-08-16 05:29:55 | wiremicrosystems.com | ||
| 1 entries | duplicate nr. 3 | |||||
| 918099691 | CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US | 2019-05-18 05:29:28 | 2019-08-16 05:29:28 | wiremicrosystems.com | ||
| 1 entries | duplicate nr. 2 | |||||
| 918097715 | CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US | 2019-05-18 05:27:54 | 2019-08-16 05:27:54 | wiremicrosystems.com | ||
| 1 entries | duplicate nr. 1 |
But only with the non-www version.
So you can create a certificate with both domain names.
Result:
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.