Hacker News Reader

Isn’t the recommended practice to update every ~60 days or so, regardless?

Either that, or use an ACME client that has support for ARI so that the CA can signal to the client when it’s time to renew.

Yeah but if you need a cert for a new site you have to use another CA.