Weekly limit for certificates and subdomain including

Hey folks!

I'm using cert-manager in Kubernetes and had an approval for 3000 certs per week for pair.sharing.io accepted.

Does this approval include all subdomains?
E.g www.bobymcbobs.pair.sharing.io

Error from cert-manager Order

Status:
  Failure Time:  2022-04-12T02:13:10Z
  Reason:        Failed to create Order: 429 urn:ietf:params:acme:error:rateLimited: Error creating new order :: too many certificates (5) already issued for this exact set of domains in the last 168 hours: *.bobymcbobs.pair.sharing.io,bobymcbobs.pair.sharing.io: see https://letsencrypt.org/docs/rate-limits/
  State:         errored
Events:          <none>

Cheers,
Caleb

1 Like

Welcome @calebwoodbine

I don't know the answer to your specific subdomain question but the error you show relates to issuing 5 identical certs in the past 7 days. This should not occur in a well-functioning system as certs are typically renewed once every 60 days.

This rate limit protects the Let's Encrypt system from poorly designed or run-away systems. There is no increase for this rate limit as it should not happen.

If testing, you should use the staging system.

3 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.