Skip to main content

Let's Encrypt SSL Certificates Limitations

Learn about limitations of Let’s Encrypt SSL certificates on Cloudways, including install & renewal limits, SAN caps, & auto-renewal rules.

Written by Syed Abuzar Mehdi
Updated over 9 months ago

Let’s Encrypt is a free, automated, and open certificate authority (CA) that provides SSL/TLS certificates to help secure websites with HTTPS.

Cloudways fully supports this initiative and offers easy one-click installation of both Let’s Encrypt and Wildcard SSL certificates through the Cloudways Platform.

However, like all services, Let’s Encrypt comes with certain built-in limitations to prevent misuse and ensure fair access for all users.

In this article, we’ll walk you through the key limitations around issuing and renewing Let’s Encrypt SSL certificates, so you can manage your site security without unexpected interruptions.


Table of Contents:


What are Let's Encrypt SSL Certificates Limitations?

Let’s Encrypt is a free, automated, and open certificate authority (CA), launched by the Internet Security Research Group (ISRG).

It provides digital SSL/TLS certificates to help website owners migrate to HTTPS and secure their web traffic.

Let’s Encrypt promotes a safer, privacy-focused web—and Cloudways proudly supports this mission by offering quick and effortless installation of Let’s Encrypt SSL Certificates and Let’s Encrypt Wildcard Certificates through the Cloudways Platform.

While Let’s Encrypt offers a powerful and cost-free way to secure your websites, it does come with a few important limitations.

These restrictions are in place to ensure responsible usage and prevent system abuse.

It's essential to note that these limitations are defined by Let’s Encrypt itself, and Cloudways has no ability to override or adjust them.

Additionally, revoking or removing an SSL certificate does not reset the limits imposed by Let’s Encrypt.

The following sections outline the key constraints you should be aware of—especially when issuing or renewing certificates on the Cloudways platform.

Tip:

Click Here if you would like to know what an SSL certificate is and what are the different types of SSL certificates.

Limitations of Installing SSL Certificates

When setting up a Let’s Encrypt SSL certificate on your Cloudways application, keep these limits in mind:

  1. Only 5 Certificates per Domain per Week
    You can install up to five certificates for the same domain (like www.example.com and example.com) within a week. This usually applies when you’re moving your site between servers or making changes.

  2. One SSL Certificate per Application
    Each application on Cloudways can have only one Let’s Encrypt SSL certificate installed at a time.

  3. Up to 100 Domains or Subdomains per Certificate
    A single SSL certificate can protect up to 100 domains or subdomains or SANs (Subject Alternative Names).

Important:

To increase the coverage of more than 100 SANs (Subject Alternative Names), you need to distribute your application into multiple applications and install SSL certificates on those multiple applications.

Limitations of Renewing SSL Certificates

Let’s Encrypt SSL certificates are valid for 90 days. You can either let Cloudways renew them automatically or renew them manually when they’re about to expire.

  • Automatic Renewal
    If you’ve enabled auto-renewal, Cloudways will renew your SSL certificate automatically 30 days before it expires, so you don’t have to do it yourself.

  • Manual (On-Demand) Renewal
    If you choose to renew the certificate manually using the on-demand renewal option, keep the following in mind:

    • You can only renew a certificate up to 5 times per day.

    • Each renewal restarts the 90-day validity from the time it's issued.

    • If you hit the daily limit, you’ll need to wait 24 hours to try again.

Tip: If auto-renewal fails for any reason, follow these steps to fix the issue.

  • Revoking Certificates
    If you no longer need an SSL certificate, or if you're moving the domain to a different application on Cloudways, it’s best to revoke the current certificate and then install a new one on the destination application.


That’s it! We hope this article was helpful.

Need Help?

If you need assistance, feel free to:

We're here 24/7 to help you!

Did this answer your question?