Certificate Auto-Renew

Certificates that renew themselves, on your own servers.

Our agent renews your certificates over ACME on your own server. The private key never leaves it, and every renewal is checked again from outside.

Public certificates are getting shorter: 100 days from 15 March 2027, 47 days from 2029. Renewing them by hand means doing the same job several times a year for every certificate. Auto-Renew moves that job to a small agent you install and approve, while SkyQon keeps the schedule and checks the result.

100 dLongest public certificate from 15 March 2027
0Private keys sent to SkyQon
25Certificates per add-on, in blocks of 25

How it works

SkyQon plans the renewal. Your server does it.

The agent runs on your host

A small agent on Linux or Windows (IIS) requests the new certificate over ACME, the protocol Let’s Encrypt and most public CAs use. The key is created on your server and stays there.

SkyQon keeps the schedule

The dashboard knows when each enrolled certificate expires and tells the agent when to renew. You can enrol a certificate straight from the inventory or from a host the exposure scan found.

Replace first, then revoke

When a certificate has to be withdrawn, the agent installs the replacement before the old one is revoked, so dealing with a problem does not cause an outage of its own.

Checked again from outside

After each renewal, the next scan checks from outside that the new certificate is the one your server now presents.

Updates you control

The agent updates itself only to releases signed by SkyQon, and only if you choose automatic updates. Manual is the default.

Evidence of the work

Each renewal is recorded, and the before and after state can go into a signed report for your auditor or your board.

What it is not

Nothing changes on your servers without you.

Auto-Renew is not a remote control for your network. SkyQon never receives your private keys and cannot log in to your servers. The agent only renews the certificates you enrol, and you can remove it at any time.

Certificates on hosts without the agent are still monitored on every plan. The dashboard then tells you which ones to renew and when, so you can do it yourself.

Find out which certificates will need renewing first.

Start with a free check of your domain. Auto-Renew is an add-on to Pro and Growth and is included in Enterprise.