Why is certbot attmepting renewal daily?

Hi @greenzwiz,

Part of the functionality of certbot renew is to attempt to renew only those certificates that are less than 30 days away from expiry. The default behavior is certbot renew --keep-until-expiring, which does not attempt to renew every certificate on your system; that would be the behavior of the alternative form certbot renew --force-renewal, which is not recommended under most circumstances.

Because of this, we feel comfortable recommending that certbot renew be run twice per day so that renewal attempts happen promptly when certificates reach 30 days from expiry. However, if you have a specific reason why you don’t want this check to happen this often, that’s fine, of course. I just want to make sure that it’s clear that under normal circumstances this is not going to renew every certificate every day.

2 Likes