# ACME Certificate Renewal scheduling not configurable

**URL:** <https://community.traefik.io/t/acme-certificate-renewal-scheduling-not-configurable/29742>\
**Category:** Traefik v3 (latest)\
**Tags:** letsencrypt-acme\
**Created:** [March 16, 2026, 5:38am UTC](https://community.traefik.io/t/acme-certificate-renewal-scheduling-not-configurable/29742 "2026-03-16T05:38:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fred](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/32.png) [@Fred](https://community.traefik.io/u/Fred)\
**Post date:** [March 16, 2026, 5:38am UTC](https://community.traefik.io/t/acme-certificate-renewal-scheduling-not-configurable/29742/1 "2026-03-16T05:38:11Z")

</div>

traefik schedules ACME Certificate Renewals starting 30 days before certificate expiry:

> **[Traefik & ACME Certificates Resolver - Traefik](https://doc.traefik.io/traefik/reference/install-configuration/tls/certificate-resolvers/acme/)**
>
> Automatic Certificate Management Environment using Let's Encrypt.

For cert life-times of 1 yr, this seem reasonable, but with cert expiry scheduled to be reduced to 100 days next year, and 47 days the year after, the effective lifetime of each cert will be down to 17 days. Should a feature request to make the 30 day trigger configurable be issued - or am I missing something??

> **[TLS Certificate Lifetimes Will Officially Reduce to 47 Days](https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days)**
>
> The CA/Browser Forum has officially voted to amend the TLS Baseline Requirements to set a schedule for shortening both the lifetime of TLS certificates.

---

<div class="post-metadata">

**Author:** ![auspex](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/auspex/32/10434_2.png) [@auspex](https://community.traefik.io/u/auspex)\
**Post date:** [March 21, 2026, 3:56am UTC](https://community.traefik.io/t/acme-certificate-renewal-scheduling-not-configurable/29742/2 "2026-03-21T03:56:34Z")

</div>

Since you specifically mention LetsEncrypt… their certificates ARE only 90 days, now. And 30 days for renewal seems reasonable. I’m not sure there needs to be a change. How is even a 17-day lifespan a problem?

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [March 21, 2026, 6:48am UTC](https://community.traefik.io/t/acme-certificate-renewal-scheduling-not-configurable/29742/3 "2026-03-21T06:48:01Z")

</div>

Traefik uses the [go-acme library](https://github.com/go-acme/lego) to handle LetsEncrypt. At least one developer works on Traefik and the library, so everything should be ready to go, when LetsEncrypt shortens the cert lifespans.