Ballot SC-081v3 passed. The phase-down is locked in.

    100-day certificates land in 146 days.

    Renewals already doubled in March 2026. They double again on March 15, 2027, and reach about 8 per year by 2029. Enter any domain to get your readiness score and see every renewal between now and 2029.

    Free forever. No signup, no catch.

    Also works inside Claude, ChatGPT, and Claude Code

    Want this countdown on your site?

    Here's What You Get Back

    A readiness score, a grade, and every renewal between now and 2029, in one page.

    yourdomain.com
    Example report
    90out of 100
    Excellent: automation ready
    Validity Management (45%)88
    CA/Issuer Intelligence (35%)100
    Renewal Pattern (excluded)Not computable
    Transparency (20%)75

    Renewal Pattern is excluded when there's no renewal history yet; remaining weights are redistributed so they reconcile with the total score.

    Renewal timeline

    Feb 2, 2027
    expires May 13, 2027
    100 days
    May 13, 2027
    expires Aug 21, 2027
    100 days
    Mar 15, 2029
    expires May 1, 2029
    47 days
    …and every renewal in between, through March 2029.

    Why this is happening

    • Browsers and CAs voted near-unanimously for shorter lifetimes.
    • Shorter lifetimes shrink the window a compromised certificate stays trusted.
    • Revocation never worked well, so expiry is becoming the safety net.

    For teams with certificates to lose.

    Continuous monitoring across all your domains, with alerts before anything expires. As renewal windows shrink from months to weeks, this becomes essential. Start free with 3 monitored domains. Paid plans cover teams with more. No sales calls, cancel anytime.

    See monitoring plans
    Included on every plan

    Ask your AI assistant about your certificates

    47DayCerts ships an MCP server, so Claude, ChatGPT, and Claude Code can check certificates and manage your monitored domains conversationally, no dashboard required.

    Read the setup guide

    Five available tools

    • check_certificateCheck any domain's live certificate.
    • list_monitored_domainsList the domains you monitor.
    • add_monitored_domainAdd a monitored domain.
    • remove_monitored_domainRemove a monitored domain.
    • list_certificate_notificationsList recent expiry notifications.

    Connection URL

    https://47daycerts.com/mcp

    Add it as a connector, sign in once, and approve access.

    You: Which of my certificates expire in the next 30 days?

    Assistant: Two of your three monitored domains renew soon: shop.example.com expires in 12 days (Let's Encrypt R11) and api.example.com in 26 days (Google WE1). Both are ACME-automated, so no manual action is needed.

    Built by Ramesh Nuti

    14 years in SSL, PKI, and digital certificates. I've sold certificates, managed renewals, and helped companies recover from outages. I built 47DayCerts because the biggest infrastructure change in SSL history is coming and most teams don't have a simple way to see what's ahead.

    Checking any domain stays free forever, no signup, no limits, no catch. That part is my way of giving back to the people still in the trenches.

    Continuous monitoring across many domains costs real money to run, so that is a paid tier. It funds the service and keeps the alerts flowing. No sales calls. No sales pitch. Just something I wish existed when I was doing this work myself.

    Connect on LinkedIn

    Frequently asked questions

    Does this affect Let's Encrypt certificates?
    Yes. It applies to every publicly trusted certificate, regardless of issuer.
    What should I do first?
    Automate renewals with ACME. Manual renewal does not survive 8 cycles a year.
    Is the checker really free?
    Yes. Single-domain checks are free forever, no signup. Monitoring across many domains is paid, and that funds the service.