A new App Service Certificate was issued yesterday, but the portal shows that it will expire in about 54 days. I understand certificate lifetimes may be getting shorter, but the portal still appears to show a one-year validity period, and I expected the certificate to last longer.
Is the short expiration related to the certificate authority's validity period or to Azure's renewal process? Does App Service issue overlapping certificates to cover the full purchased term? If I choose a manual renewal now, is there a way to see the expiration date of the replacement certificate beforehand?
Auto-renewal is enabled, so do I need to take any additional action?
3 Answers
The expiry date belongs to the specific certificate that was issued, so check its certificate details and issuer rather than assuming the portal is displaying the full subscription term. Azure may issue shorter-lived certificates and replace them before the overall term ends. With a certificate kept inside App Service and auto-renewal enabled, Azure should renew it and update the App Service binding automatically.
A certificate expiring in roughly two months is shorter than the currently documented lifetime for a purchased App Service Certificate. First confirm whether this is a purchased certificate or an App Service Managed Certificate. Also check that domain ownership validation is still current, since a renewal can remain pending if validation has expired. The short displayed expiry is not necessarily a problem, but it is worth checking why this certificate has a shorter period than expected.
Auto-renewal only helps with the certificate managed by App Service. If you exported the certificate or use it elsewhere, that copy will not be updated automatically; you must export the replacement and deploy it again. For a certificate that remains entirely in App Service, verify that renewal succeeds and that the renewed certificate is attached to the binding rather than relying only on the setting being enabled.
The portal still shows the overall validity as one year, but this individual certificate expires in 54 days. Is Azure issuing overlapping certificates, and can I preview the replacement certificate’s expiry date before manually starting a renewal?