Getting SSL Error

Support
1

Checked our site today and it was down and after doing some digging, saw this error on the Domain Management page in the SSL section:

SniCertificate::CertificateInvalidError: Unable to verify challenge for …We can’t renew your Let’s Encrypt certificate automatically until the issue is resolved.

We haven’t made any changes so it’s a weird error to troubleshoot. After some refreshing, the erorr changed to:

**Acme::Client::Error::RateLimited: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/**

We can’t renew your Let’s Encrypt certificate automatically until the issue is resolved. Check our [troubleshooting guide](https://docs.netlify.com/domains-https/troubleshooting-tips/#certificates-and-https) for more information on how to fix the problem, and then renew the certificate.
Check our troubleshooting guide for more information on how to fix the problem, and then renew the certificate.

Not sure how to proceed here.

2

Hi @alwaysaugust ,

Sorry to hear you’ve hit the rate limit. There’s no way to reset it according to Let’s Encrypt. You’ll need to wait until the rate limit expires after a week.

In the meantime, you could try installing a custom certificate.

Also, if you could share your site name we could help take a look to see what caused the initial error.

3

The site is alwaysaugust.co

4

Can i get a certificate issued via cloudflare?

5

@audrey I just added custon SSL from CLoudflare and the issue is still persisting

6

Cloudflare’s SSL certificate is not usable by anyone other than cloudflare, so no surprise there. We say not to use it in the second to last paragraph of this guide:

So, you’ll need to buy one from some vendor (cf HTTPS (SSL) | Netlify Docs), or wait for the timeout to pass so we can get one.

7
  • Site name: areasp.netlify.app
  • Custom domains: areasp.it and www.areasp.it
  • DNS setup: External DNS via Aruba (technorail nameservers)
  • Current DNS records (A record → 75.2.60.5, CNAME → areasp.netlify.app)
  • The exact error: SniCertificate::CertificateValidationError: Unable to verify challenge for *.areasp.it: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.areasp.it
  • Your request: Remove the wildcard (*.areasp.it) and check for/remove any stale Netlify DNS zone, then re-issue a standard certificate covering only areasp.it and www.areasp.it

please can you support me?