429 Too many request Letsencrypt AutoSSL

Vs Nu

Well-Known Member
Jul 17, 2015
178
12
68
India
cPanel Access Level
Root Administrator
WARN AutoSSL failed to create a new certificate order because the server’s Let’s Encrypt account (https://acme-v02.api.letsencrypt.org/acme/acct/111734628) has reached a rate limit. (urn:ietf:params:acme:error:rateLimited (The request exceeds a rate limit) (Rate limit for '/acme' reached)) You may contact Let’s Encrypt to request a change to this rate limit.


How to solve this issue on cPanel
 

Mehrdad Tari

Member
Nov 11, 2015
12
2
53
ایران
cPanel Access Level
Root Administrator
we have same issue
all of our hosting site over 2,000 site cert expired (Lets Encrypt)
i removed lets encrypt script and re-installed it and new letsencrypt version is installed.
but we have an error:
MASTER DCV: A rate limit prevents DCV.

This is while the letsencrypt says that it has removed the rate limit.

Please tell me, What to do

thanks
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
14,276
2,229
363
cPanel Access Level
Root Administrator
There isn't anything additional you can do on your end. If you're still hitting the rate limit, that's completely on the Let's Encrypt side of things. My only recommendation is to try that work again to see if it goes through.
 

Vs Nu

Well-Known Member
Jul 17, 2015
178
12
68
India
cPanel Access Level
Root Administrator
Hope it will be solved automatically !
 
  • Like
Reactions: cPRex

webmastergreg

Active Member
Dec 19, 2010
29
2
53
Paris
cPanel Access Level
Root Administrator
Hi
same issue here for me
Already on 98.0.10 and just done /scripts/upcp
and there was an upgrade:
[2021-10-28 09:47:08 +0200] [/usr/local/cpanel/scripts/rpmup] ---> Package cpanel-letsencrypt-v2.noarch 0:1.01-24.3 will be updated
[2021-10-28 09:47:08 +0200] [/usr/local/cpanel/scripts/rpmup] ---> Package cpanel-letsencrypt-v2.noarch 0:1.03-11.1.cpanel will be an update

But some wildcard domains still refused
in the meantime it's not much of a problem as long as the domain isn't with HSTS, but mine are, so all my domains without a prefix are refused by browsers and because HSTS we can't set an exception in the browser.