Symptoms
Unable to install or renew Let's Encrypt SSL certificate:
Error: Could not issue a Let's Encrypt SSL/TLS certificate for example.com.
One of the Let's Encrypt rate limits has been exceeded for example.com.
See the related Knowledge Base article for details.
Details
Invalid response from https://acme-v02.api.letsencrypt.org/acme/new-order.
Details:
Type: urn:ietf:params:acme:error:rateLimited
Status: 429
Detail: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-limits/
Cause
Limits for issuing certificates are reached on Let's Encrypt servers. This is a Failed Validation limit of 5 failures per account, per hostname, per hour.
Resolution
The only way is to wait until limits will be reset on Let's Encrypt side.
Information about Let's Encrypt limits can be found here: Let's Encrypt | Rate Limits
The most common rate limit of 50 certificates per domain per 7 days in a place that is set by Let's Encrypt. As the limit is defined by Let's Encrypt directly and cannot be managed through Plesk. To overcome the issue wait for this week period to pass and reissue the certificate.
There are two other limits:
- User can create a maximum of 10 Accounts per IP Address per 3 hours.
- User can create a maximum of 500 Accounts per IP Range within an IPv6 /48 per 3 hours.