SSL/TLS certificates secure communication between your website and visitors. Each certificate has a validity period the length of time it remains active before requiring renewal. Understanding these limits helps you avoid service interruptions and browser warnings.
Current Industry Standards
-
SSL/TLS certificates cannot be issued for longer than 13 months (397 days).
-
This standard was introduced to improve security by ensuring certificates are renewed more frequently.
-
Most certificates are issued for 1 year at a time.
How WHM Handles Validity Periods
-
WHM/cPanel automatically removes any certificate that exceeds the 13‑month limit.
-
When removed, WHM replaces it with a Sectigo SSL certificate to maintain security.
-
Example: Cloudflare origin certificates expire after 15 years by default. These will be replaced automatically in WHM to comply with the 13‑month rule.
Best Practices
-
Always issue certificates with a maximum validity of 13 months.
-
Renew certificates before expiration to avoid downtime.
-
Use WHM’s SSL/TLS → Manage SSL Certificates to monitor expiry dates.
-
Consider enabling auto‑renewal for certificates purchased through Ruachost.
Notes
|