swepayError Catalog

CA Manager

Certificate Limit Reached 409

The tenant has reached its quota of active certificates.

type https://errors.swepay.com.br/ca-manager/certificate-limit-reached

What this means

The tenant has reached the maximum number of active mTLS certificates permitted by its plan, so CA Manager will not issue another until headroom is freed. The limit protects the certificate authority and keeps revocation lists manageable for financial-market integrations.

The response includes limit and current extension members so your client can show exactly where the tenant stands.

Common causes

  • The plan's active-certificate quota is fully consumed.
  • Expired or unused certificates were never revoked and still count.
  • Automation is issuing certificates faster than it retires them.

How to resolve

Revoke certificates you no longer need to free up quota, then retry the issuance. Audit for orphaned or duplicate certificates that can be retired. If your legitimate usage has outgrown the plan, request a quota increase through your account owner. Retrying without freeing headroom will keep returning this error.

Example response

HTTP 409 · application/problem+json
{
  "type": "https://errors.swepay.com.br/ca-manager/certificate-limit-reached",
  "title": "Certificate Limit Reached",
  "status": 409,
  "detail": "The active certificate limit for your plan has been reached.",
  "instance": "/v1/certificates",
  "limit": 100,
  "current": 100
}

References

Machine-readable: /ca-manager/certificate-limit-reached.json