Is there any way to reissue an SSL certificate for my domain? Basically I was having server issues at Siteground and must have installed the SSL more than 5 times in an attempt to resolve an issue. The site is now stable but I need to secure it before site release to the client.
There’s a rate limit of 5 certificates per 7 days per domain. It’s a rolling window of 7 days, so if you issued all certificates today, you’ll have to wait exactly 7 days. You can use https://crt.sh/ to check how many certificates for your domain were issued recently.
Weird I am being told the Let’sEncrypt servers are not allowing another SSL to be installed, by I am at only 4 installed this week… IS there an area for more in depth support? Thanks.
It’s a client domain so want that to remain private, sorry. No subdomains at all. Is there some way to speak with a support member, I know this is opensource so forums may be the only contact method. Thanks for the reply too.
You can get all of your previous certificates from the Certificate Transparency system. If you find them in crt.sh, you can download them directly. Just click on the “Certificate” (or “ASN.1”) link.
Of course, you’ll also need your corresponding private key, which crt.sh doesn’t have. (Our Python client makes a new private key for each certificate; I don’t know if Siteground’s installer does the same.)
I am grateful, but this is probably the number one complaint folks have about LE. 5 is too restrictive and doesn’t allow enough grace for those who are just getting started with LE and screw up a few certs. At the very least, a slightly more reasonable limit like 20 might alleviate a lot of the issues folks have when first getting started.
In addition to the reply posted by @hanlonhart, I'd mention that the reason why revoking a cert doesn't restore your limit is because the current limits are not there to restrict the number of active certificates, rather the number of issued certificate to make sure that the resources available are properly distributed among all the users.
You use LE issuance resources when you request a certificate, not depending on the state of the certificate itself. They are rate-limiting issuance.
And then someone will come, and say that for him the best limit is 25 because he needs 21. It's a never ending story: whenever there is a limit, there will always be someone who think he deserves a larger limit.