Let’s Encrypt issues free domain-validated certificates through the automated ACME protocol; hosting panels integrate it so every site gets HTTPS by default. Certificates last 90 days by design — automation, not humans, must renew them.
That design choice is also the operational risk: when renewal automation breaks (DNS change, blocked validation, dead cron), nothing visibly fails for weeks — until expiry. Monitoring days-remaining per certificate converts that silent failure into an early warning.
Frequently asked questions
Why are Let’s Encrypt certificates only 90 days?
Deliberately — short lifetimes limit damage from leaked keys and force automation, which is more reliable than humans remembering annual renewals.
Does Let’s Encrypt verify company identity?
No — it validates domain control only (DV). For organisation-validated certificates you need a commercial CA, but for encryption strength DV is equivalent.