Web host · checked November 15, 2026

Is Kinsta ready for 100-day and 47-day certificates?

Renews automatically

Kinsta’s own certificates renew automatically, so the shorter lifetimes (100 days from March 15, 2027, 47 days from March 15, 2029) are handled for you, with the exceptions below.

What renews automatically

• The free Cloudflare SSL renews automatically 30 days before expiry, provided the _acme-challenge CNAME record stays in your DNS.[Kinsta 1 (Kinsta Docs — SSL certificates), 2 (Kinsta Docs — SSL FAQ)]

What doesn’t

• Custom certificates: renew with your provider and upload again in MyKinsta. Kinsta doesn't send expiry notices for custom certificates.[Kinsta 1 (Kinsta Docs — SSL certificates), 2 (Kinsta Docs — SSL FAQ)]
• If you remove the _acme-challenge CNAME, renewal stops until you add it back. Kinsta emails you 30 days before expiry.[Kinsta]

When it renews

30 days before expiry (free Cloudflare SSL).[Kinsta]

What to do, and by when

1. March 15, 2027 · In 120 days
   Maximum certificate lifetime drops to 100 days[CA/Browser Forum 1 (CA/Browser Forum — Baseline Requirements for TLS Server Certificates (v2.3.1, 4 Oct 2026)), 2 (CA/Browser Forum — Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods)]
   Custom certificates will need uploading more often. Consider the free certificate.

Steps

1. In MyKinsta, open Domains and check the SSL status.
2. Make sure the _acme-challenge CNAME record Kinsta gave you is still in your DNS.
3. For a custom certificate, note its expiry yourself. Kinsta won't remind you.