# Is it ok to "--force-renewal" every months?

**URL:** <https://community.letsencrypt.org/t/is-it-ok-to-force-renewal-every-months/207733>\
**Category:** Help\
**Created:** [November 3, 2023, 8:53am UTC](https://community.letsencrypt.org/t/is-it-ok-to-force-renewal-every-months/207733 "2023-11-03T08:53:17Z")\
**Posts on this page:** 3\
**Page:** 2

<div class="post-metadata">

**Author:** ![jvanasco](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/jvanasco/32/55900_2.png) [@jvanasco](https://community.letsencrypt.org/u/jvanasco)\
**Post date:** [November 3, 2023, 2:45pm UTC](https://community.letsencrypt.org/t/is-it-ok-to-force-renewal-every-months/207733/22 "2023-11-03T14:45:11Z")

</div>

Explaining the differences mentioned above for the next person to read this thread:

1. By default, Certbot runs a cronjob every day. It only renews the Certificates that exceed the renew time (with a default of 60 days). In the future this will be based on the Automatic Renewal Information payloads.

2. `--force-renewal` will tell certbot to force a renewal regardless of the expiry date. You can certainly run that every 30 days to force new certificates, but if it fails you will not be able to recover automatically until the next invocation. You can not run this daily, because that will break rate limits.

3. So the standard solution for this situation is what @9peppe and @rg305 mentioned above:

> [@9peppe](#):
>
> Running that cron every 30 days is a good way not to know if you have a valid certificate.
> 
> A renewal can fail for transient reasons beyond your control. Trying twice a day letting certbot decide if a renewal is warranted or not is the proper way to do this.
> 
> You don't want to wait another 30 days to retry.

> [@rg305](#):
>
> Then make the automatic renewal period 45 days.

---

<div class="post-metadata">

**Author:** ![sblantipodi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/sblantipodi/32/23931_2.png) [@sblantipodi](https://community.letsencrypt.org/u/sblantipodi)\
**Post date:** [November 3, 2023, 6:31pm UTC](https://community.letsencrypt.org/t/is-it-ok-to-force-renewal-every-months/207733/23 "2023-11-03T18:31:22Z")

</div>

thank you very much for the explanation, this is much appreciated.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [December 3, 2023, 6:32pm UTC](https://community.letsencrypt.org/t/is-it-ok-to-force-renewal-every-months/207733/24 "2023-12-03T18:32:20Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

[Previous page](https://community.letsencrypt.org/t/is-it-ok-to-force-renewal-every-months/207733.md?page=1)