Web host · checked November 15, 2026

Is WP Engine ready for 100-day and 47-day certificates?

Renews automatically

WP Engine’s own certificates renew automatically, so the shorter lifetimes (100 days from March 15, 2027, 47 days from March 15, 2029) are handled for you, with the exceptions below.

What renews automatically

• All WP Engine-managed certificates (Let's Encrypt, Advanced Network, Global Edge Security) default to auto-renew.[WP Engine]
• On the Legacy Network, Let's Encrypt certificates last 90 days and auto-renewal is attempted 22 days before expiry.[WP Engine]

What doesn’t

• Third-party certificates can't auto-renew. You add the renewed certificate as a new third-party SSL.[WP Engine]

When it renews

Let's Encrypt on the Legacy Network: 22 days before expiry.[WP Engine]

What to do, and by when

1. March 15, 2027 · In 120 days
   Maximum certificate lifetime drops to 100 days[CA/Browser Forum 1 (CA/Browser Forum — Baseline Requirements for TLS Server Certificates (v2.3.1, 4 Oct 2026)), 2 (CA/Browser Forum — Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods)]
   If you import a third-party certificate, consider WP Engine's managed SSL before your first renewal after this date.

Steps

1. In the User Portal, open the SSL page for your environment and check each domain's certificate type.
2. Managed certificates renew by themselves. For a third-party certificate, upload each renewal before the old one expires, or switch to a managed certificate.