SSL Renewal Check

Free checker · public data only

Will your HTTPS certificate keep renewing on its own?

Certificate lifetimes are shrinking from 200 days to 100 days on March 15, 2027 and to 47 days in 2029. Enter your domain to see your certificate’s renewal pattern, the dates that apply to your certificate authority, and what to do on your host.

We read public Certificate Transparency logs only: no connection to your server. Checked domains aren’t stored with any personal data, and the checker sets no cookies.

Who is affected

Key dates

  1. In 87 days Let’s Encrypt
    Let's Encrypt default certificates drop to 64 days (64 days; validation reuse 10 days)[Let's Encrypt 1, 2]
  2. In 120 days All public CAs
    Maximum certificate lifetime drops to 100 days (100 days; validation reuse 100 days)[CA/Browser Forum 1, 2]
  3. In 458 days Let’s Encrypt
    Let's Encrypt default certificates drop to 45 days (45 days; validation reuse 7 hours)[Let's Encrypt 1, 2]
  4. In 486 days All public CAs Domain validation
    Email domain validation (admin@, webmaster@ …) ends[CA/Browser Forum]
  5. In 851 days All public CAs
    Maximum certificate lifetime drops to 47 days (47 days; validation reuse 10 days)[CA/Browser Forum 1, 2]

Full timeline, including each CA’s own dates →

Guides

Questions

Will my SSL certificate renew automatically when lifetimes get shorter?

If your host, CDN or platform issues the certificate for you (Let’s Encrypt, Google Trust Services and similar), renewal is usually automatic and adjusts to the shorter lifetimes. If you bought a certificate and install it yourself, each new certificate has to be reissued and installed by hand: at least every 100 days from March 15, 2027, and every 47 days from March 15, 2029.

What does the checker look at?

Only public Certificate Transparency logs, where every publicly trusted certificate is recorded. We don’t connect to your server, scan ports or perform TLS handshakes.

When do Let’s Encrypt certificates get shorter?

The default changes to 64-day certificates on February 10, 2027, then to 45-day certificates on February 16, 2028. You get the shorter certificate at your next renewal after each date.

Is the result a guarantee?

No. It’s an estimate from public data, explained step by step. We can’t see internal certificates, the certificate on a server behind a CDN, or whether a renewed certificate was actually installed.