Skip to content

Commit 4937e2c

Browse files
Clarify info on cert-validity-periods and add link from ACM
1 parent 92dead1 commit 4937e2c

File tree

2 files changed

+16
-10
lines changed

2 files changed

+16
-10
lines changed

src/content/docs/ssl/edge-certificates/advanced-certificate-manager/manage-certificates.mdx

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,3 +107,9 @@ You can configure alerts to receive notifications for changes in your certificat
107107
/>
108108

109109
<Render file="get-started" product="notifications" />
110+
111+
---
112+
113+
## Advanced certificate renewal
114+
115+
The certificate validity period you choose determines when the auto renewal will start for your certificate. For details, refer to [Validity period and renewal](/ssl/reference/certificate-validity-periods/).

src/content/docs/ssl/reference/certificate-validity-periods.mdx

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -13,13 +13,21 @@ description: Review information about available validity periods for your
1313

1414
import { Render } from "~/components"
1515

16+
For certificates managed by Cloudflare, attempts to renew start at the auto renewal period and continue up until 24 hours before expiration. The auto renewal period varies according to the certificate validity period, as explained in the sections below.
17+
18+
If a certificate fails to renew and another valid certificate exists for the hostname, Cloudflare will deploy the valid certificate within the last 24 hours before expiration.
19+
20+
:::note
21+
For information regarding custom certificates (managed by you), consider this other page on [renewal and expiration](/ssl/edge-certificates/custom-certificates/renewing/).
22+
:::
23+
1624
## Universal SSL
1725

1826
<Render file="universal-ssl-validity" />
1927

2028
## Advanced certificates
2129

22-
When you order an [advanced certificate](/ssl/edge-certificates/advanced-certificate-manager/manage-certificates/), you can select the following values for the **Certificate validity period**:
30+
When you order an [advanced certificate](/ssl/edge-certificates/advanced-certificate-manager/manage-certificates/), you can select different certificate validity periods. Each certificate validity period has a corresponding auto renewal period, when [attempts to renew](/ssl/reference/certificate-validity-periods/) will start.
2331

2432
| Certificate validity period | Auto renewal period | Notes |
2533
| --------------------------- | ------------------- | -------------------------------------------------------------------------------------- |
@@ -44,12 +52,4 @@ First, shorter-lived certificates limit the damage from key compromise and mista
4452

4553
Second, shorter certificates encourage automation. The more frequently you have to do a task, the more likely you will want to automate it. Automation also means that you are less likely to let a certificate expire in production or give a person access to key material.
4654

47-
For more details on the benefits of shorter validity periods, refer to our [blog post introducing Advanced Certificate Manager](https://blog.cloudflare.com/advanced-certificate-manager/).
48-
49-
## Failure to renew and certificate replacement
50-
51-
For certificates managed by Cloudflare, attempts to renew start at the auto renewal period (based on the [different validity periods](/ssl/reference/certificate-validity-periods/#advanced-certificates)) and continue up until 24 hours before expiration.
52-
53-
If a certificate fails to renew and another valid certificate exists for the hostname, Cloudflare will deploy the valid certificate within these last 24 hours.
54-
55-
For information regarding custom certificates (managed by you), consider this other page on [renewal and expiration](/ssl/edge-certificates/custom-certificates/renewing/).
55+
For more details on the benefits of shorter validity periods, refer to our [blog post introducing Advanced Certificate Manager](https://blog.cloudflare.com/advanced-certificate-manager/).

0 commit comments

Comments
 (0)