Too many certificates already issued for exact set of domains

Help
1

Hallo
for https://crt.sh/?q=mail.tvnl.eu
server ubuntu 18.04

I reinstalled the Ubuntu 18.04 server
I did not save the certificates before reinstalling
so
now I don’t have any certificate on the server in the directory /etc/letsencrypt/

I want to issue another certificate
the existing ones are for Apache2, and now I use nginx

I used the command
#certbot --nginx
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx

Which names would you like to activate HTTPS for?

1: autoconfig.tvnl.eu
2: mail.tvnl.eu

Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter ‘c’ to cancel): 2
Obtaining a new certificate
An unexpected error occurred:
There were too many requests of a given type :: Error creating new order :: too many certificates already issued for exact set of domains: mail.tvnl.eu: see https://letsencrypt.org/docs/rate-limits/
Please see the logfiles in /var/log/letsencrypt for more details.

my question is:

  1. how can i delete all certificates from https://crt.sh/?q=mail.tvnl.eu because they are for apache2 and now I use nginx

  2. how can i issue a new certificate for nginx

I’m waiting for answers
thank you

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot --version
certbot 0.31.0
nginx -v
nginx version: nginx/1.14.0 (Ubuntu)
system ubuntu 18.04 64x

2

certbot certonly --dry-run -d mail.tvnl.eu
Saving debug log to /var/log/letsencrypt/letsencrypt.log

How would you like to authenticate with the ACME CA?

1: Nginx Web Server plugin (nginx)
2: Spin up a temporary webserver (standalone)
3: Place files in webroot directory (webroot)

Select the appropriate number [1-3] then [enter] (press 'c' to cancel): 1
Plugins selected: Authenticator nginx, Installer None
Obtaining a new certificate

IMPORTANT NOTES:

  • The dry run was successful.

but I can't find my location

3

You cannot undo certificates. Deleting or revoking them will not reset your rate limits.

You'll have to wait another 12 hours before this certificate can be issued again.

In future, it may help to save your certificates if you plan to reinstall your server again.

3 Likes
4

ok
I will try tomorrow
and I will come back with an answer
thanks for everything

1 Like
5

12 hours have passed

certbot --nginx -d mail.tvnl.eu
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Obtaining a new certificate
An unexpected error occurred:
There were too many requests of a given type :: Error creating new order :: too many certificates already issued for exact set of domains: mail.tvnl.eu: see https://letsencrypt.org/docs/rate-limits/
Please see the logfiles in /var/log/letsencrypt for more details.

and nothing no solution

:frowning:

1 Like
6

with this command I solved the problem
all a certificate and ready

certbot --nginx -d tvnl.eu -d www.tvnl.eu -d mail.tvnl.eu

1 Like
7

Your site is now secure and your cert expires 5 Oct, 2020. :slightly_smiling_face:

2 Likes
8

I only use this certificate

crt.sh ID Logged At ⇧ Not Before Not After Matching Identities Issuer Name
3055014140 2020-07-07 2020-07-07 2020-10-05 mail.tvnl.eu C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3

how can I cancel the rest of the certificates?

9

You can't, and there's no reason to. If the public keys are destroyed, nobody can use them.

3 Likes
10

correction: if the private keys are destroyed

3 Likes
11

Ack. Yes, of course. Oops.

2 Likes
12

how I destroy all the keys
I just want this key to stay
3055014140 2020-07-07 2020-07-07 2020-10-05 mail.tvnl.eu C=US, O=Let’s Encrypt, CN=Let’s Encrypt Authority X3

https://crt.sh/?q=mail.tvnl.eu

system ubuntu 18.04
nginx

13

If you've deleted the server instances (or deleted the certificate files from them), the private keys are destroyed--you had the only copy of them. The public keys are, as the name suggests, public. They are immutably logged and cannot be changed or removed. But they can't be used without the private keys, which you've already destroyed.

2 Likes
14

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.