Refresh SSL the same time to all domains

[inomi13]

I am looking for solution how to refresh ssl for all domain in my server in the same hour because few domains I have redirected another server.

Now I have been synchronising ssl by crontab task with rsync but I want use crontab one per day not everyminutes like at the moment.

 

[Zhenyapan]

SSL not expired in one time, it starts to refresh before expires, so you will have working ssl in both servers even if it will sync once a week.

 

[inomi13]

So if ssl of domain will be expire in Aug 6 04:51:59 2023 GMT and has enable auto refresh this ssl will be refresh in this date or before ?

 

[Zhenyapan]

LetsEncrypt cert expires in 90 days, DA starts updates after 60 days to have 30 extra days for any case (maybe your IP rate-limited, maybe bad internet connection at this moment etc.) so usually you have at least 20-25 extra days.

 

[Richard G]

Additionally: it's better this way, because if you refresh all hosts at the same time, you might run into Letsencrypt limits if you have a lot.