Hacker News new | ask | show | jobs
by shawnz 2410 days ago
With certbot, the check to see if certificates are close to expiry is done offline. So the service is only hit if a renewal is needed. The developers of certbot actually recommend that you schedule the cron twice a day.

EDIT: Actually I'm wrong. It also checks if the certificate was revoked via OCSP. However I can't imagine that it consumes much resources.

1 comments

They're also different resources, and cacheable ones.