Browser tool
Lifetime calendar
Public TLS certificates are getting shorter in steps. Start from how often you renew, or from a certificate, and see when each step reaches you and how many renewals a year it means.
How to use it
- Choose how to start: how often you renew today, a certificate you paste, or its two dates.
- Add how many certificates you look after, to see the yearly total.
- Read when each step affects you, then the schedule and your renewals per year.
Questions
Where do the limits come from?
From the CA/Browser Forum Baseline Requirements, which public CAs must follow. The tool reads the numbers and dates from this site's checked list of dated facts.
Do the limits apply to my private CA?
No. They apply to publicly trusted TLS certificates. A private CA sets its own lifetimes, although short lifetimes and automation are good practice there too.
How do I keep up with renewals?
Automate them with ACME, the protocol most public CAs support, and monitor expiry dates. The handbook chapter on ACME shows how.