SSL Renewal Check

Website platform · checked November 15, 2026

Is Heroku ready for 100-day and 47-day certificates?

Renews automatically

Heroku’s own certificates renew automatically, so the shorter lifetimes (100 days from March 15, 2027, 47 days from March 15, 2029) are handled for you, with the exceptions below.

What renews automatically

  • ACM is included for all apps. It renews each certificate one month before expiry, or sooner if Let's Encrypt's ACME Renewal Information (ARI) suggests it.[Heroku]

What doesn’t

  • Manually uploaded certificates (other CAs, EV, Private Space wildcards) aren't renewed by ACM.[Heroku]

When it renews

One month before expiry, or earlier if ARI suggests it.[Heroku]

What to do, and by when

  1. February 10, 2027 · In 87 days
    Let's Encrypt default certificates drop to 64 days[Let's Encrypt 1, 2]
    Nothing to do with ACM.

Steps

  1. Run heroku certs:auto to check ACM status.
  2. If you upload your own certificate, consider moving to ACM.

Your options, free first

  1. Free: switch back to Heroku’s own free certificate, which renews automatically.
  2. An automated paid certificate, if you need a paid one (for example OV/EV): choose a seller whose certificates install themselves (ACME or an install agent).
    • Namecheap SSL (with SSL Manager / SSL Proxy automation)[Namecheap]
  3. A host with built-in automatic SSL, if your current host can’t automate:
    • Hostinger (free Lifetime SSL on web, cloud and agency plans)[Hostinger]

No links here are paid. If that ever changes, they will be marked “Sponsored” and never change the order. Disclosure.

Questions

Does Heroku support ARI?

Yes. Heroku says ACM checks Let's Encrypt's ACME Renewal Information and renews early when suggested.

Sources

Facts on this page last checked November 15, 2026.