Open g1thub-us3r opened 2 years ago
I'm also developing a tool which does similar checks against certificates, amongst other things, having a site with a cert that is reliably less than 30 days away from expiry would be incredibly useful!
I think we could do this once we start using ACME to automatically acquire some of the certificates used (otherwise, manually doing this would be too much effort).I think most ACME CAs will let us specify a very-short-lifetime (say, 25 days) and we could just keep it renewed on a ~weekly cronjob. Adding some ACME usage is in my plans for this quarter, so I can look into this again after that is set up.
I'm currently testing a tool to alert me when any of the certificates that I'm responsible for are close to their expiry date. Because I'm actively working on the tool I've also gone to the effort of renewing all my certs and I have nothing to test it on! This would be a handy feature, maybe a site with a certificate that is always less than 30 days away from expiry.