Skip to content

SSL/TLS certificate validity periods

SSL/TLS certificates secure communication between your website and visitors. Each certificate has a validity periodthe length of time it remains active before requiring renewal. Understanding these limits helps you avoid service interruptions and browser warnings.

  • SSL/TLS certificates cannot be issued for longer than 13 months (397 days).
  • This standard was introduced to improve security by ensuring certificates are renewed more frequently.
  • Most certificates are issued for 1 year at a time.
  • WHM/cPanel automatically removes any certificate that exceeds the 13‑month limit.
  • When removed, WHM replaces it with a Sectigo SSL certificate to maintain security.
  • Example: Cloudflare origin certificates expire after 15 years by default. These will be replaced automatically in WHM to comply with the 13‑month rule.
  • Always issue certificates with a maximum validity of 13 months.
  • Renew certificates before expiration to avoid downtime.
  • Use WHM’s SSL/TLS → Manage SSL Certificates to monitor expiry dates.
  • Consider enabling auto‑renewal for certificates purchased through Ruachost.