We use caddy with tls on demand, for huge amount of domains.
Sometimes we just hit Let’s Encrypt limit, and Zero SSL limit and new certs can’t be issued.
Does it possible to make redirect in such cases?
For example, if hit comes to https://domain1.com, Caddy don’t have cert for domain, and issuing new certs are failed, redirect click to specific url with doamin name as parameter like: https://parking.com/domain1.com
It’s completely impossible. If the TLS handshake fails, then the browser cannot trust anything the server tells it. For that reason, anything based on the HTTP response is impossible, including redirects.
If you’re hitting rate limits without abuse but purely on standard usage, you might consider applying for higher rate limits. I don’t know off the top of my head about ZeroSSL but I know LetsEncrypt have a form.
If you are a large hosting provider or organization working on a Let’s Encrypt integration, we have a rate limiting form that can be used to request a higher rate limit. It takes a few weeks to process requests, so this form is not suitable if you just need to reset a rate limit faster than it resets on its own.
—Rate Limits - Let's Encrypt