# "API rate limit exceeded" When Getting Certificate

**URL:** <https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075>\
**Category:** Plex Media Server\
**Tags:** server-linux\
**Created:** [March 25, 2021, 9:58pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075 "2021-03-25T21:58:42Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 25, 2021, 9:58pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/1 "2021-03-25T21:58:43Z")

</div>

Server Version#: 1.22.1.4228  
Player Version#: 1.29.1.1974-a65b3ef3

One of my servers can get a certificate without a problem. The other can’t. Users can’t connect to the server (app.plex.tv is unable to connect to “Plex 1” securely). Secure Connections set to Preferred.

Mar 25, 2021 16:50:18.037 [0xa3efe430] ERROR - CERT: Error acquiring new certificate: Failed to upload CSR: 429, \<?xml version="1.0" encoding="UTF-8"?\>  
  
\<error code=“1003” message=“API rate limit exceeded”/

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 26, 2021, 3:10am UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/2 "2021-03-26T03:10:04Z")

</div>

Rate limiting occurs when PMS queries for an updated certificate and, for whatever reason (usually file permissions) can’t save and use that certificate.

The other common reason why it can’t obtain its own certificate is if a host certificate is superseding what PMS has by default. HTTPS fails but Plex.tv will remember the IP.

After confirming file permissions (owner:group) of all the files in “Library” are as they should be ( a `sudo chown -R plex:plex` takes care of it in short order)

and letting PMS sit idle.

A certificate can be downloaded.

I might be able to help if efforts can be coordinated. (I can reset what exists if PMS has been stopped for a while. This will clear the counters so it can then pull correctly that first time)

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 26, 2021, 12:11pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/3 "2021-03-26T12:11:11Z")

</div>

How long should I shut down PMS? I shut all of them down for an hour and restarted just one. Still getting the rate limit exceeded.

Thanks.

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 26, 2021, 1:30pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/4 "2021-03-26T13:30:04Z")

</div>

@MarkJH

Normal rate limiting idle time required to clear throttling is that the API will remove the limit 24 hours after first triggered.

So if it was first throttled at noon, and persisted for several hours, shutdown until noon the next day is the normal self-clearing time.

I see you have several servers. which one is having this problem?

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 26, 2021, 1:32pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/5 "2021-03-26T13:32:49Z")

</div>

Plex 1, Plex 3, Plex 5 can’t get the certificates.  
Plex 2 and Plex 4 are fine.  
Is there a way to keep PMS running, but not have it try and get a certificate for a day to avoid the rate limit?

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 26, 2021, 1:55pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/6 "2021-03-26T13:55:02Z")

</div>

There is no method to keep PMS from requesting a certificate.  
It needs that certificate for HTTPS communication with Plex.tv and your users.

Knowing which machines are having trouble we can reset them, one at a time and bring them back online.

Did you check the file ownership & permissions in /var/lib/plexmediaserver ?  
I find it very odd that everyone for you went out at the same time. What changed on your end?

Knowing the worst case is the machine might need be off for several hours , which would you like me to reset first ?

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 26, 2021, 2:23pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/7 "2021-03-26T14:23:04Z")

</div>

I did chown on all of the servers. I don’t think anything changed on my end. Starting with Plex 1, then 3, then 5 would work.

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 26, 2021, 2:46pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/8 "2021-03-26T14:46:03Z")

</div>

I have reset “Plex 1”.

While there, I removed the duplicate of “Plex 1” which has been idle for over a year and also has no shares or users attached.

You may restart “Plex 1”

If it doesn’t get a cert, power it down and let sit for several hours (4) and then try again.

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 26, 2021, 2:49pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/9 "2021-03-26T14:49:40Z")

</div>

Plex 1 was able to get a certificate!

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 26, 2021, 3:19pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/10 "2021-03-26T15:19:02Z")

</div>

I have reset “Plex 3”.

You may now restart it.

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 26, 2021, 3:21pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/11 "2021-03-26T15:21:45Z")

</div>

Plex 3 was able to get a certificate!

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 26, 2021, 3:27pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/12 "2021-03-26T15:27:48Z")

</div>

Plex 5 has been reset.

You may now restart it.

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 26, 2021, 3:35pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/13 "2021-03-26T15:35:10Z")

</div>

They all have certificates. Thanks for your help!

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 26, 2021, 3:35pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/14 "2021-03-26T15:35:45Z")

</div>

Glad I could help.

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 29, 2021, 12:07pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/15 "2021-03-29T12:07:11Z")

</div>

This is happening again on my Plex 1. Any idea why?

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 29, 2021, 3:42pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/16 "2021-03-29T15:42:38Z")

</div>

@MarkJH

What changed on the server ? Freshly issued certificates don’t ask for a new one spontaneously 3 days after having been issued

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 29, 2021, 4:01pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/17 "2021-03-29T16:01:36Z")

</div>

No change other than additional content added. No config changes.

---

<div class="post-metadata">

**Author:** ![MarkJH](https://avatars.discourse-cdn.com/v4/letter/m/e19adc/32.png) [@MarkJH](https://forums.plex.tv/u/MarkJH)\
**Post date:** [March 29, 2021, 4:29pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/18 "2021-03-29T16:29:28Z")

</div>

Looking at the logs, it looks like it could not find the certificate at 1:07 am. There was a short power failure on the system. Possibly got corrupted with the power failure?

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 29, 2021, 4:35pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/19 "2021-03-29T16:35:43Z")

</div>

That’s possible.

Still , it should not be stuck in 'Generating" status.

---

<div class="post-metadata">

**Author:** ![ChuckPa](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/chuckpa/32/79710_2.png) [@ChuckPa](https://forums.plex.tv/u/ChuckPa)\
**Post date:** [March 29, 2021, 4:39pm UTC](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075/20 "2021-03-29T16:39:43Z")

</div>

Certificate reset.

Restart the server.

[Next page](https://forums.plex.tv/t/api-rate-limit-exceeded-when-getting-certificate/704075.md?page=2)
