Server software · checked November 15, 2026

Is cPanel AutoSSL ready for 100-day and 47-day certificates?

Renews automatically

cPanel AutoSSL’s own certificates renew automatically, so the shorter lifetimes (100 days from March 15, 2027, 47 days from March 15, 2029) are handled for you, with the exceptions below.

What renews automatically

AutoSSL automatically installs domain-validated certificates for cPanel users' domains (website, mail, Web Disk and cPanel services).[cPanel]
The default AutoSSL provider is Let's Encrypt, included free with the cPanel licence, and it supports wildcard domains.[cPanel 1 (cPanel & WHM Documentation — Manage AutoSSL), 2 (cPanel & WHM Documentation — The Let's Encrypt Plugin)]

What doesn’t

Certificates you buy and install yourself aren't renewed by AutoSSL. An optional setting lets AutoSSL replace non-AutoSSL certificates that are invalid or expire within three days. cPanel warns this can swap an OV/EV certificate for a DV one.[cPanel]

When it renews

Unknown: cPanel AutoSSL doesn’t say how far ahead it renews.

What to do, and by when

February 10, 2027 · In 87 days
Let's Encrypt default certificates drop to 64 days[Let's Encrypt 1 (Let's Encrypt — Decreasing Certificate Lifetimes to 45 Days (Dec 2, 2025)), 2 (Let's Encrypt — 64-Day Certificate Lifetimes Coming Feb 2027 (Oct 7, 2026))]
Nothing to change for AutoSSL certificates if AutoSSL runs normally. Check that SSL/TLS Status shows no errors.
March 15, 2027 · In 120 days
Maximum certificate lifetime drops to 100 days[CA/Browser Forum 1 (CA/Browser Forum — Baseline Requirements for TLS Server Certificates (v2.3.1, 4 Oct 2026)), 2 (CA/Browser Forum — Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods)]
If you installed a purchased certificate in cPanel, switch the domain to AutoSSL before your first renewal after this date, unless you need an OV/EV certificate.

Steps

In cPanel, open SSL/TLS Status and check every domain is covered by an AutoSSL certificate with no errors.
If a domain shows a purchased certificate, decide whether you need it. If not, remove it so AutoSSL can cover the domain.
If AutoSSL fails, make sure the domain's DNS points to this server (domain validation has to reach it).

Not published by cPanel AutoSSL

How many days before expiry AutoSSL renews: not stated in cPanel's own documentation.

We re-check these every month.

Questions

Does cPanel AutoSSL work with 64-day or 45-day Let's Encrypt certificates?

AutoSSL renews the certificates it issues. cPanel's documentation doesn't say how many days ahead it renews, so we list that as unknown. Check SSL/TLS Status after Feb 10, 2027 to confirm renewals keep coming through.

Will AutoSSL replace my purchased certificate?

Only if the server admin enables the option to replace non-AutoSSL certificates that are invalid or expire within three days.

Sources

cPanel & WHM Documentation — Manage AutoSSL (cPanel, accessed November 15, 2026)
cPanel & WHM Documentation — The Let's Encrypt Plugin (cPanel, accessed November 15, 2026)

Facts on this page last checked November 15, 2026.