> See when the shorter limits for public TLS certificates reach you, and how many renewals a year each step means for the certificates you run. Source: https://pkizerotohero.com/tools/lifetime/ Browser tool # Lifetime calendar Public TLS certificates are getting shorter in steps. Start from how often you renew, or from a certificate, and see when each step reaches you and how many renewals a year it means. *Interactive tool: Lifetime calendar (runs in the browser at [/tools/](https://pkizerotohero.com/tools/))* ## How to use it 1. Choose how to start: how often you renew today, a certificate you paste, or its two dates. 2. Add how many certificates you look after, to see the yearly total. 3. Read when each step affects you, then the schedule and your renewals per year. ## Questions Where do the limits come from? From the CA/Browser Forum Baseline Requirements, which public CAs must follow. The tool reads the numbers and dates from this site's checked list of dated facts. Do the limits apply to my private CA? No. They apply to publicly trusted TLS certificates. A private CA sets its own lifetimes, although short lifetimes and automation are good practice there too. How do I keep up with renewals? Automate them with ACME, the protocol most public CAs support, and monitor expiry dates. The handbook chapter on ACME shows how. ## Learn what it checks - [Inventory, expiry and renewal](https://pkizerotohero.com/handbook/certificate-lifecycle/) - [ACME and the 47-day schedule](https://pkizerotohero.com/handbook/acme/)