Pending Move

[jonathanlennox]

Let's Encrypt is designed to work with the new ACME protocol, which gets and validates certificates for you automatically. So you don't have to manually renew the certificate every 90 days -- you just have to set up a cron job or something to do it periodically.

cron jobs are known to fail - I've seen it happen a non-trivial number of times.

If you use the recommended "certbot" tool (an ACME implementation developed by the EFF) in automatic mode, the "certbot renew" command checks which if any of your certificates are coming up on expiration, and renews all those and only those which need it.  So you can schedule the cron job to run weekly or even daily without harm, and if one run gets missed because of server downtime or whatever, a subsequent one should catch it before expiry.  I'm pretty sure the default behavior is to renew a good long time before expiry, for just this reason.