Validity Period Findings

A certificate's validity period is the time between its Not Before and Not After dates. Shorter-lived certificates, renewed automatically, are the direction the industry is heading.

CERT_LIF01: Certificate valid for more than 90 days

Key: CERT_LIF01 · Label: Long Reg Period · Severity: Notice (a suggestion) · Can be dismissed: Yes

What it means: the certificate is valid for more than 90 days.

Why it matters: a shorter lifetime limits the damage from a lost or stolen key, and it's where browser rules are heading: the maximum lifetime of a publicly trusted TLS certificate is being cut in stages, to 47 days by 2029. A process built around renewing once a year will have to change.

How to fix it: use certificates valid for 90 days or less, renewed automatically (such as with ACME). If you've chosen longer certificates on purpose, dismiss this finding on the monitor.

How to confirm: on the Certificate Report, the certificate's Validity period check reads "N days, 90 or less".