Hi I am trying to issue a certificate through Vercel which uses Let’s Encrypt for my domain:
However it keeps failing to get the certificate. I believe this is because I reached the rate limit at some point. I was told that the rate limit would have expired by now but it is still not working.
I have attached a screenshot from crt.sh showing the times I was trying to issue the certificate.
Any help with this would be much appreciated.
Thanks very much.
Hello, thanks for you reply, I am using Vercel which issue them automatically. And when I try to add it, it just gets stuck in a loop trying to generate one before failing.
I was having issues with DNS which is the reason why i kept requesting more certificates but now I can’t put one on at all
Please fill out the fields below so we can help you better. We need to know as much about your configuration as possible for someone here to help. I am not familiar with Vercel but someone here probably is.
Let’s start here!
My domain is: transform2fit.co.uk
I ran this command:
It produced this output:
My web server is (include version):
The operating system my web server runs on is (include version):
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don’t know):
I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
Rip
My domain is: transform2fit.co.uk
I ran this command:
My web server is (include version): Not sure I am hosting on Vercel
The operating system my web server runs on is (include version): Not sure
My hosting provider, if applicable, is: Vercel
I can login to a root shell on my machine (yes or no, or I don’t know): No
I’m using a control panel to manage my site (no, or provide the name and version of the control panel): Vercel
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot): I am unsure about this as I have been doing it through the Vercel dashboard.
I am totally not familiar with Vercel. So I'll end up learning about this with you.
Please Read:
https://letsencrypt.org/docs/rate-limits/
You say it is not succeeding but on 6/22/2020 you obtained several certs that can be used....
Rip
Just from observing the image you posted, it appears Vercel is trying to issue new certificates over and over - instead of installing one of those already created. Have you contacted Vercel and asked them about this? Simply using the same procedure you’ve been using is only going to try to create more certs and run into the limit over and over.
Yeah on the 22nd it worked but I removed the domain and added it again since then and it won’t now generate a certificate.
Vercel by default doesn’t allow manual uploads of certificates so I can’t use the ones already generated. That’s why I’m trying to generate a new one.
Do you know when the limit will be reset? I will try to contact Vercel in the meantime
For valid certs, it’s 7 days from the day and time of the first certificate that was issued. That’s why Vercel should install one of the valid certs - not keep on trying to issue new ones. There must be something buggy about their process that isn’t installing the cert once it’s made.
Okay so does this mean that by the 29th at the time of the first certificate I should be able to get a new certificate? I’m going to contact Vercel now and see if they can do something for me about using one of the valid certificates that is already there.
Thanks for your help, apologies I’m very new to all this stuff.
So the limit is for “exact set of domains”. @KallendJack could request a modified request for transform2fit.co.uk and www.transform2fit.co.uk . Jut put both on the same cert and that will get around the limit… But then new limits will apply.
Rip
Surely if the first certificate was requested on the 20th at 14:57:15 UTC, it should be available to to generate a new certificate?
Yes, but as @Rip said, you can create a new cert with both domain names on it. That’s a great way to get around the limit. But if you don’t use the new cert, you’ll end up hitting into the limit if you constantly create duplicates over and over. So, your best bet is to try to install a valid cert(s) you’ve already created for your domain(s). You should still ask Vercel how to do that if their control panel or whatever system they use is not doing that for you. 
Okay so how do I go about making a new cert for both domains? The only option on Vercel is to add a domain one at a time?
I’ve contacted them now so hopefully they can put the existing certificate on for me.
Thank you for your help.
Also as for downloading existing certificates, is it okay to do this from https://crt.sh/ ?
Vercel's website says
"Our Vercel platform enables you to deploy modern websites and applications without needing any complicated server configuration. Not only do we automatically configure DNS records for your domain, we also instantly issue and renew free wildcard SSL certificates, completely hands-free."
So I'd put your request in to Vercel support as they state theirs is supposed to be a hands free totally automatic process.
https://vercel.com/blog/automatic-ssl-with-vercel-lets-encrypt
Best I can suggest.
Rip
Thank you for your help! I’ll check in here when I hear back from them just incase anyone else has the same issue in future.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
