SSL/TLS certificate validity periods
SSL/TLS certificates secure communication between your website and visitors. Each certificate has a validity periodthe length of time it remains active before requiring renewal. Understanding these limits helps you avoid service interruptions and browser warnings.
Current Industry Standards
Section titled “Current Industry Standards”- SSL/TLS certificates cannot be issued for longer than 13 months (397 days).
- This standard was introduced to improve security by ensuring certificates are renewed more frequently.
- Most certificates are issued for 1 year at a time.
How WHM Handles Validity Periods
Section titled “How WHM Handles Validity Periods”- WHM/cPanel automatically removes any certificate that exceeds the 13‑month limit.
- When removed, WHM replaces it with a Sectigo SSL certificate to maintain security.
- Example: Cloudflare origin certificates expire after 15 years by default. These will be replaced automatically in WHM to comply with the 13‑month rule.
Best Practices
Section titled “Best Practices”- Always issue certificates with a maximum validity of 13 months.
- Renew certificates before expiration to avoid downtime.
- Use WHM’s SSL/TLS → Manage SSL Certificates to monitor expiry dates.
- Consider enabling auto‑renewal for certificates purchased through Ruachost.