Ready for 100-day certificates before 15 March 2027.
From 15 March 2027, public TLS certificates may be valid for at most 100 days, so each one is renewed about four times a year. This package finds every certificate you have, puts automatic renewal on your ten most important hosts, and gives you signed evidence of where you started and where you ended.
Today a public certificate may live 200 days. On 15 March 2027 the limit falls to 100 days, and on 15 March 2029 to 47 (CA/Browser Forum ballot SC-081). Renewing by hand twice a year is a chore; four times a year it becomes the outage nobody planned for. Most organisations do not know how many certificates they run, who renews them, or which ones a person still renews by hand. We answer those three questions first, then automate the renewals that matter most.
What you get
Four steps, one fixed price.
1. An inventory of your certificates
Every public certificate we can see from outside and in the Certificate Transparency logs, plus the internal ones on servers where you let us run the inventory agent. For each one: where it is served, who issued it, when it expires, and whether anything renews it automatically today.
2. A signed "before" report
A signed renewal-readiness report of the starting point: which endpoints have no automated renewal path. It goes into your own evidence chain in the SkyQon Digital Trust Center, so anyone can check later that it was not changed.
3. Automatic renewal on your top 10 hosts
We install the SkyQon renew agent on the ten hosts that matter most to you (Linux with systemd, or Windows with IIS), with your approval and in your change window. It renews over ACME from a public CA or your own internal CA, and each renewal is then checked from outside: the new certificate must actually be served.
4. A signed "after" report and a handover
A second signed report shows what changed. You keep both, with a short list of what is left to automate and in what order.
Limits
Stated before you order.
Ten hosts
The fixed price covers automatic renewal on up to ten hosts. More hosts go on the subscription, not on a bigger package.
What the agent needs
A Linux host with systemd or a Windows host with IIS, outbound HTTPS to the dashboard and to the CA, and a CA that supports ACME. Load balancers and appliances that cannot run an agent stay in the inventory and the reports, and we tell you how to renew them.
Evidence, not certification
The reports are signed evidence of what we measured on the dates shown. They do not certify compliance with any law or standard.
Afterwards, a subscription if you want one
To keep the renewals and the monitoring running, continue on the Pro plan with the Certificate Auto-Renew add-on: €149 a month for Pro plus €45 a month for Auto-Renew, which covers 25 certificates. You can also stop after the package; the reports stay yours.
Book the package, or ask a question
We reply within one business day with dates and an invoice. Prices exclude VAT.