4 ms·

I think it's not the cost the issue, but the peace of mind brought by the automatisation of the process of certificate renewal. This where LE is for me differe

• cm2187 9y ago
  True but you can buy a 7y commercial wildcard cert. That also offers some peace of mind. You still have to worry about renewing it in many years but on the other side you are not exposed to a job breaking or an api changing.
  • tialaramex 9y ago
    Nope. Currently (today, 21 February 2018) the limit is 39 months, starting 1 March 2018 the limit becomes 825 days. These limits are set down in the Baseline Requirements, which are rules agreed between the Certificate Authorities and Browser vendors (in practice mostly OS vendors) at their standing meeting. Chrome at least actually implements these in software, ie leaf certificates which seem to have a longer lifetime are simply invalid and don't work. In practice commercial CAs tend to sell products as 1 year, 2 year or 3 year, and then they use the extra days in the BRs to let you "keep" the extra days if you renew early, so that you don't feel the need to wait until the last minute to renew to get maximum value.
• ams6110 9y ago
  If you're in business, you need a process so that you are not likely to forget dates. Tax filing deadlines, other regulatory reporting, etc. Certificate expiration can just be part of that. It's not really that hard. I manage a dozen+ certs manually, I get reminder emails 30 days before they expire, and it takes literally a few minutes to submit a new CSR. I could autmate it even more than I do, but https://xkcd.com/1205/ https://xkcd.com/1205/