Mitigating CA Rate Limits during Renewals in Automated Centralized Certificates System
Arthur Petrosyan, Gurgen Petrosyan, Robert Tadevosyan · 2025
Some Certificate Authorities nowadays provide free wildcard certificates, but at the same time, enforce strict rate limits on certificate issuance and renewal to prevent abuse and maintain system stability.However, in large-scale network environments, where numerous services rely on automated certificate management, these limits pose operational challenges.This paper proposes a centralized strategy to mitigate CA rate limits during mass certificate renewals.The approach includes centralized certificate issuance, caching and sharing of wildcard certificates, intelligent scheduling, and multi-CA fallback mechanisms.The paper is a continuation of previous work in this area to build a production system using open-source tools, which was done within the Academic Scientific Research Computer Network of Armenia (ASNET-AM) and presented during past CSIT conferences.