# SSL/TLS certificate validity periods

> Understand the current maximum validity period for SSL/TLS certificates and how it affects renewals and installs in WHM.

Source: https://helpcenter.ruachost.com/ssl-security/ssl-certificates/ssl-tls-certificate-validity-periods/

SSL/TLS certificates secure communication between your website and visitors. Each certificate has a **validity period**the length of time it remains active before requiring renewal. Understanding these limits helps you avoid service interruptions and browser warnings.

## Current Industry Standards

- SSL/TLS certificates cannot be issued for longer than **13 months (397 days)**.
- This standard was introduced to improve security by ensuring certificates are renewed more frequently.
- Most certificates are issued for **1 year** at a time.

## How WHM Handles Validity Periods

- WHM/cPanel automatically removes any certificate that exceeds the 13‑month limit.
- When removed, WHM replaces it with a **Sectigo SSL certificate** to maintain security.
- Example: Cloudflare origin certificates expire after **15 years** by default. These will be replaced automatically in WHM to comply with the 13‑month rule.

## Best Practices

- Always issue certificates with a maximum validity of **13 months**.
- Renew certificates **before expiration** to avoid downtime.
- Use WHM’s **SSL/TLS → Manage SSL Certificates** to monitor expiry dates.
- Consider enabling **auto‑renewal** for certificates purchased through Ruachost.

> **Note:**
- Free certificates (e.g., Let’s Encrypt) also follow the 90‑day validity model, requiring frequent renewal.
- Longer‑term certificates (like Cloudflare origin SSLs) are not supported in WHM and will be replaced.
- Keep track of expiry dates to prevent unexpected service disruptions.