Hey,

We can't investigate if you hide your domain. :) Could you share the domain with us?

Hi,

My apologies.

These were registered successfully 2hours ago, but again they took around 2 hours to complete. I'm planning to test around 10 more in a few hours, and 50 later on. If possible, I want to register around 150 domains in one go.

I'm curious if there is a certain limit to the number of domains you can register (or SSL Certificates vercel can generate) within a set amount of time?

Yes you can create maximum 50 SSL cert per domains in an week: https://letsencrypt.org/docs/rate-limits/.

You should consider using wild card domain so that one *.example.com certificate can be used for all similar subdomains.

I see. Is Let's Encrypt rate limit the only problem here?

Thank you for your suggestion, but it is difficult for us to use the wild card domain as we would have to migrate our domains from Cloudflare to Vercel. There are other active services using multiple different subdomains, and we do not have the time to migrate all.

Are there any workaround to this rate limit? If 50 is the maximum per week, it would take us at least 3 weeks to complete registration of all sub domains and that is far from ideal.

It seems like the limit is not strictly 50, as I was able to register 5 or 6 more after I registered the first 50.

Right now I'm trying to add 8 more domains:

Thanks.

Is Let’s Encrypt rate limit the only problem here?

Yes this is the problem. I found following errors in logs

too many certificates (50) already issued for "bestbeerjapan.com" in the last 168h0m0s, retry after 2024-10-17 07:41:03 UTC: see https://letsencrypt.org/docs/rate-limits/

Are there any workaround to this rate limit?

Unfortunately no as the rate limit is set by upstream service Letsencrypt. We don't have control over this. For advanced usecase, you can consider upgrading to Enterprise plan which will unlock the ability upload custom SSL certificate on your own: https://vercel.com/enterprise

Vercel

Enterprise – Vercel

Build, deploy, and govern enterprise apps and agents with centralized identity, security, observability, and spend controls on Vercel.

Thank you!

Hi, I have a follow up question.

Would it be possible to:

1. Temporarily upgrade to the Enterprise plan and upload custom SSL certificate for now and use it for the remaining 150 domains
2. Continue issuing SSL certificate through vercel
3. Once all 150 SSL certificates are issued, switch to using the vercel issued certificates

Thank you.

Hi,

Enterprise plan comes with minimum 1 year commitment I believe. You can check with our Sales team for more information.

Also you will face this issue again during renewal of all these certificates. It's better to switch to wildcard one which will use 1 certificate for all similar subdomains