When and how are TLS certificates renewed?

Legacy Knowledge Base

Published Jun. 30, 2025

When and how are TLS certificates renewed?

Written By

Sergio Alonso

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM).

Issue

We want to know when TLS certificates are renewed.
Additionally, how are they renewed? Is it needed any operation on our part?

Environment

Liferay Cloud's TLS cetificates.

Resolution

Liferay SaaS uses TLS certificates for two types of domains:
- Liferay Cloud's certificate covering the production domains (liferay.cloud, *.lfr.cloud, *.liferay.cloud) are renewed by Liferay Infrastructure Team with enough advance.
- For autogenerated custom domains, you can either use the SSL certificate provided by Let’s Encrypt or you can define one or more custom certificates. In the case of using Let's Encrypt ones, they have a period of validity of three months, and these certificates are automatically renewed 30 days before expiry. Thus, no customer operation is needed.