Why Does My New App Service Certificate Expire in Only 54 Days?
Asked by
dovetail.corner
A new App Service Certificate was issued yesterday, but the portal shows it expiring in about 54 days. I'm wondering whether this is related to the certificate authority's validity period or Azure's newer shorter certificate lifetimes. The portal still appears to show a one-year term, and auto-renewal is enabled. Does Azure issue overlapping certificates to cover the full subscription period, and is there a way to preview the expiration date of the next certificate if I manually trigger a review?
Answers
Auto-renewal only updates the certificate managed by App Service. If you exported the PFX and installed copies elsewhere, those copies won’t be replaced automatically. You’ll need to export the renewed certificate and deploy it again wherever it’s being used. For certificates uploaded or managed outside App Service, the renewal and replacement process must be handled separately.
Reply to this answer
Shorter certificate lifetimes can be expected, but roughly two months is shorter than the commonly documented validity for a purchased App Service Certificate. Confirm whether this is a purchased certificate or a managed certificate, then inspect its actual validity dates and renewal status. Domain validation is especially important because a renewal can remain pending if Azure can’t revalidate the domain.
Reply to this answer
The expiration date belongs to the specific certificate that was issued, so check the certificate details and issuing authority rather than assuming the portal is displaying it incorrectly. Azure may use shorter-lived certificates and replace them before the overall purchased term ends. With the certificate kept in App Service and auto-renewal enabled, Azure should renew the certificate and update the associated binding automatically. It’s still worth verifying that the renewal succeeds and that domain ownership validation is current.
Reply to this answer
Add your answer
Answers are reviewed before publication.
dovetail.corner: The portal still shows the overall validity as one year, but this particular certificate expires in 54 days. Is there a way to see the expiration date of the next certificate before manually reviewing or renewing it?