ok at least it wasn't an important rate-limit, messed up the renewal logic so it kept requesting a cert for the same domain (but that limit is separate from all the other ones)