Status 429: too many certificates already issued for: europa.eu

[cherouvim]

Today I got this while trying to verify www-admin-panel.xyz.europa.eu :

  "type": "urn:acme:error:rateLimited",
  "detail": "Error creating new cert :: too many certificates already issued for: europa.eu: see https://letsencrypt.org/docs/rate-limits/",
  "status": 429

Is it the case that letsencrypt thinks that europa.eu is a domain? If yes, then maybe it should be considered as a TLD (and not a domain) because there are tons of independent European agencies that have their sites under *.europa.eu. e.g:

• ec.europa.eu
• iate.europa.eu
• cpvo.europa.eu
• easa.europa.eu
• eesc.europa.eu
• fra.europa.eu
• enisa.europa.eu
• …

All these are separate entities who manage their DNS namespace on their own. I don’t think that the amount of registrations of one should interfere with the other’s.

[mnordhoff]

@cherouvim

Is it the case that letsencrypt thinks that europa.eu is a domain?

Yes.

@cherouvim

If yes, then maybe it should be considered as a TLD (and not a domain) because there are tons of independent European agencies that have their sites under *.europa.eu. e.g:

You may be right, but it's up to the europa.eu domain administrators to request that something be done about it. They should either:

• Apply for a rate limit exemption from Let's Encrypt.
• Submit the domain to the Public Suffix List, which is used by Let's Encrypt, but also has broader implications for things like HTTP cookies in web browsers. (For example, abc.europa.eu wouldn't be able to set a *.europa.eu cookie and hack xyz.europa.eu.)