Plex Cert Expired - Plex Clients (Shield, Sony Android TV App, etc) Cannot Connect

Server Version#: 1.42.2.10156
Player Version#: All

I had issues today with my plex clients all transcoding even though they are direct play capable and on the same LAN. After much troubleshooting I came across this error in my logs:

Nov 20, 2025 17:04:29.549 [23421525551928] DEBUG - CERT: Forcing refresh.
Nov 20, 2025 17:04:29.553 [23421525551928] DEBUG - CERT: Certificate expires soon, fetching a new one.
Nov 20, 2025 17:04:29.553 [23421525551928] DEBUG - [HCl#5f] HTTP requesting GET https://plex.tv/api/v2/devices/056d7456a1fb15a3a1c0264aa11cf7fa1e2f99af/certificate/subject
Nov 20, 2025 17:04:29.861 [23421575256888] DEBUG - [HttpClient/HCl#5f] HTTP/1.1 (0.3s) 200 response from GET https://plex.tv/api/v2/devices/056d7456a1fb15a3a1c0264aa11cf7fa1e2f99af/certificate/subject
Nov 20, 2025 17:04:29.912 [23421525551928] DEBUG - [HCl#60] HTTP requesting PUT https://plex.tv/api/v2/devices/056d7456a1fb15a3a1c0264aa11cf7fa1e2f99af/certificate/csr?reason=expiring&invalidIn=-18577
Nov 20, 2025 17:04:30.016 [23421575256888] DEBUG - [HttpClient/HCl#60] HTTP/1.1 (0.1s) 429 response from PUT https://plex.tv/api/v2/devices/056d7456a1fb15a3a1c0264aa11cf7fa1e2f99af/certificate/csr?reason=expiring&invalidIn=-18577 (reused)
Nov 20, 2025 17:04:30.016 [23421525551928] ERROR - CERT: Error acquiring new certificate: Failed to upload CSR: 429,

It seems my cert has expired and I consistently get an error attempting to renew.

The only workaround I have is to Allow Insecure Connections on clients that allow that feature.

Is there a way to get this cert renewed?

Stop your plex server for 30 minutes and then restart it. a 429 error is a rate limit error.

@techdiver

I looked at your account.

  1. All the old (4+ years old and abandoned) servers have been removed
  2. I reset the certificate for your current docker server
  3. Please stop PMS and wait a few minutes then start it
3 Likes

Excellent that has fixed it. Many thanks.

I just got hit by this same outdated cert issue. how can I check for old abandoned servers, or pull a new cert?

Please stop PMS and wait a few minutes, then re-start it

That was the fix! Thank you kindly

It also fixed remote access that has been flaky. much appreciated!

I should reboot my server more often…

Unfortunately no use without my revoking the stuck certificate.

Nothing I can do to prevent this?

Unfortunately not.

Well, thank you for your time, hopefully we meet again in five year!

Any chance you could look at my cert?

Been spending the last day trying to find out why no devices can connect.

can you revoke my cert as well? I got the same problem

@highlorddave

Your certificate did reset itself. Plezse restart the server if you’ve not already done so

@richardtorma

I’ve reset your certificate. You may restart the server

thank you very much

Could you reset my certificate also? Feels like I’ve had the same issue.

@stanklyone

Cert reset. Please restart the server

Thanks so much that did the job, I was really confused by this issue until I found this thread. Have you had to invalidate certificates for some reason recently? Just with a few of us having this issue at once?

Or have they all just naturally expired at once and it’s coincidental? If the latter how long are certificates valid for usually?

All certificates expire, and are renewed, every 90 days.
Most renew without incident.
Only a few fail to renew.

Operations is trying to resolve why it’s started happening

They will get to the bottom of it quickly.

Until then, just let us know and we’ll manually

Hello, i have to same issue (Failed to upload CSR: 429) since yesterday. Can you also reset my certificate please?