Update on rate limit increase request

Issuance Policy
1

Hi,

Last week on Monday the 21st of Feb I placed a request to increase the rate limit for our domain but I haven't received an update or any further information, I know the team must be busy but would it be possible to check on my request ?

Were a University that host over 3000 certificates per Load Balancer and were in the stages of migrating expiring certificates from QuoVadis to LetsEncrypt while still allowing users to create new certs from LetsEncrypt,

Account: 168659440
Domain: auckland.ac.nz

Error
{
"type": "urn:ietf:params:acme:error:rateLimited",
"detail": "Error creating new order :: too many certificates already issued for: auckland.ac.nz: see Rate Limits - Let's Encrypt",
"status": 429
}

Any help or advice would be much appreciated

Cheers

Reid

3 Likes
2

This is strange. The last certificate in public transparency logs is from August 2020: https://crt.sh/?q=auckland.ac.nz

2 Likes
3

As part of auckland.ac.nz we have two subdomain (domain extension)

dev.auckland.ac.nz
test.auckland.ac.nz

LetsEncrypts counts these requests against "auckland.ac.nz" rate limit quota

https://crt.sh/?q=dev.auckland.ac.nz
https://crt.sh/?q=test.auckland.ac.nz

Cheers

Reid

1 Like
4

Crt.sh can have some trouble fetching all the certs from the database if there are too many..

@rwat090 It can take a few weeks I'm afraid to have the rate limiting form to be processed.

5 Likes
5

You could switch issuing certs between several ACME CAs.
[until the rate limit has been adjusted]

2 Likes
6

This will be my backup procedure two days before the cert expires, just hoping the increase will be applied sonner than later

1 Like
7

@Osiris is there any way just to check on my request, its been three weeks I haven't heard anything about the increase, im just concered the request wasnt processed or rejected..

8

Are you currently hitting the rate limit? I'm not sure if you will actually receive a notification.

2 Likes
9

I believe you should get an email.

We can ask @lestaff for an update.

4 Likes
10

Hi @lestaff

Sorry to reach out but im getting desperate, is there any chance you could provide me an update on my rate limit increase request, im not sure if I missed a response or my request was rejected / approved..

Cheers

Reid

11

You know that in the meantime you can issue 50 new certificates per week (and renewals don't count), do you?

(Each certificate can cover 100 names if you want)

2 Likes
12

Reid,

PM me the rate limit override you need and we'll get it in place tonight.

4 Likes
13

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.