This. I audit nothing and I admit it. I run certbot-auto from a cron job on an old CentOS 7 box in Sydney and pray. It has worked since 2018. One day it will break and I will have 14 days of panic.
The 90-day thing means my panic window is small. This is not a feature. This is an anxiety generator.
Member
Then set your cron to run every 30 days instead of every 60. Problem solved. You are choosing the anxiety.
Member
I learning acme.sh now in Da Nang. Very difficult for me. The dns api for my provider not in list, need use manual mode. I wait 90 day and do again? No automatic? Very sad.
Vietnam provider not support api for dns challenge. Many friend use Cloudflare but I want use local domain .vn.
Member
You can use http challenge if you have static IP ạ no need dns api ạ
Member
My IP dynamic ạ very sad ạ
For dynamic IP you can use ddns first, no? Then http challenge work. Or change provider, many cheap VPS in Singapore, no?
What about ZeroSSL? Also free 90 day but with dashboard and email reminder. No acme needed if you dont want.
ZeroSSL is a Sectigo reseller. The free tier has rate limits and the dashboard is not an API. If you want automation you use ACME anyway, at which point you are back to choosing a client.
"Email reminder" is not a strategy. It is a failure mode with a delay.
