Too many certificates already issued for exact set of domains

Help
1

Hi, this happen to me in my kubernetes environment.

My domain is:
dev.business.styletheory.co

I ran this command:
i just update my cert-manager to v0.8 and update the ClusterIssuer using Helm as describe in their docs https://cert-manager.readthedocs.io/en/latest/tasks/upgrading/upgrading-0.7-0.8.html. But unfortunately i think i might be wrong by delete and re-apply my ingress rules so it can change to new format.

It produced this output:
I0922 17:10:39.968099 1 logger.go:38] Calling CreateOrder
E0922 17:10:40.908690 1 controller.go:200] cert-manager/controller/orders “msg”=“re-queuing item due to error processing” “error”=“error creating new order: acme: urn:ietf:params:acme:error:rateLimited: Error creating new order :: too many certificates already issued for exact set of domains: dev.business.styletheory.co: see https://letsencrypt.org/docs/rate-limits/” “key”=“default/business-service-ingress-secret-3776752785”
too many certificates already issued for exact set of domains

And i’m confusing now how to solve it. i don’t know how to find how many its issued know. what my quotas now, how long it will reset again. i hope you can help me guys.

thank you

2

Hi @steven

you have created 5 identical certificates - https://check-your-website.server-daten.de/?q=dev.business.styletheory.co#ct-logs

Issuer not before not after Domain names LE-Duplicate next LE
Let's Encrypt Authority X3 2019-09-22 2019-12-21 dev.business.styletheory.co - 1 entries duplicate nr. 5 next Letsencrypt certificate: 2019-09-24 15:35:39
Let's Encrypt Authority X3 2019-09-18 2019-12-17 dev.business.styletheory.co - 1 entries duplicate nr. 4
Let's Encrypt Authority X3 2019-09-18 2019-12-17 dev.business.styletheory.co - 1 entries duplicate nr. 3
Let's Encrypt Authority X3 2019-09-18 2019-12-17 dev.business.styletheory.co - 1 entries duplicate nr. 2
Let's Encrypt Authority X3 2019-09-17 2019-12-16 dev.business.styletheory.co - 1 entries duplicate nr. 1

So you can create the next 2019-09-24.

3

Hi @JuergenAuer

can i just force delete those 5 identical certificates ?

1 Like
4

Never delete your certificates. Your site won’t have any at all if you do. You have a valid certificate good until 2019-12-21. Do not delete your certificates… never a good thing to do.

1 Like
5

Hi Mr. @JimPas , thanks for tour reply
so i just need to wait until 2019-09-24 and it will auto generated the new one. isn’t it ?

cause by now it not accessible anyway

6

Please read the documentation.

Revoking certificates does not reset rate limits , because the resources used to issue those certificates have already been consumed.

Same with deleting.

1 Like
7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.