# We are seeing that the SSL certificate of the cluster hosts expire in a few days. **URL:** \ **Category:** Open Q&A\ **Tags:** account-management, hosts-classic\ **Created:** [September 3, 2019, 8:41am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799 "2019-09-03T08:41:33Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![jose-antonio\_ra](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/jose-antonio_ra/32/38171_2.png) [@jose-antonio\_ra](https://community.dynatrace.com/u/jose-antonio_ra)\ **Post date:** [September 3, 2019, 8:41am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/1 "2019-09-03T08:41:33Z")
Hi all. We have a doubt. We are seeing that the SSL certificate of the cluster hosts expire in a few days. ![21785-1567499992406.png](https://global.discourse-cdn.com/dynatrace/original/2X/b/b8b9d857f7d01831df4dc0aecc4fc27b09b5ed95.png) What does it affect if it expires? Can monitoring data be lost? Or Is it renewed automatically? Is there anything we should keep in mind before the expiration date? Thanks in advance. Jose A ---
**Author:** ![Radoslaw\_Szulgo](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/radoslaw_szulgo/32/1977_2.png) [@Radoslaw\_Szulgo](https://community.dynatrace.com/u/Radoslaw_Szulgo)\ **Post date:** [September 3, 2019, 8:52am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/2 "2019-09-03T08:52:07Z")
Certificate should be automatically renewed. I’ll check the details and update you on that. If a certificate expired you will see the warning in the browser when accessing UI. Monitoring should not be affected. ---
**Author:** ![jose-antonio\_ra](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/jose-antonio_ra/32/38171_2.png) [@jose-antonio\_ra](https://community.dynatrace.com/u/jose-antonio_ra)\ **Post date:** [September 3, 2019, 9:19am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/3 "2019-09-03T09:19:35Z")
Thanks you Radoslaw. Can you confirm the automatic renewal? Is there any way to renew it manually before it expires? and thus avoid problems… Regards ---
**Author:** ![Julius\_Loman](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/julius_loman/32/51_2.png) [@Julius\_Loman](https://community.dynatrace.com/u/Julius_Loman)\ **Post date:** [September 3, 2019, 10:27am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/4 "2019-09-03T10:27:40Z")
Dynatrace by default uses certificates from Letsencrypt, unless you are using your own certs. They are normally valid for 3 months. I think the renewal process starts about a week before the expiration. You don’t need to worry about that. Unless you lose the connectivity to mission control, the certificates will be renewed automatically. ---
**Author:** ![Radoslaw\_Szulgo](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/radoslaw_szulgo/32/1977_2.png) [@Radoslaw\_Szulgo](https://community.dynatrace.com/u/Radoslaw_Szulgo)\ **Post date:** [September 3, 2019, 10:30am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/5 "2019-09-03T10:30:42Z")
It expires on October 26th - which is in 1.5 month ahead. Certificate will be refreshed 14 days before an expiration time. ---
**Author:** ![Radoslaw\_Szulgo](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/radoslaw_szulgo/32/1977_2.png) [@Radoslaw\_Szulgo](https://community.dynatrace.com/u/Radoslaw_Szulgo)\ **Post date:** [September 3, 2019, 10:33am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/6 "2019-09-03T10:33:36Z")
Ah and there’s no way to refresh that manually. ---
**Author:** ![Julius\_Loman](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/julius_loman/32/51_2.png) [@Julius\_Loman](https://community.dynatrace.com/u/Julius_Loman)\ **Post date:** [September 3, 2019, 11:10am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/7 "2019-09-03T11:10:49Z")
Actually there is 🙂 You need to disable and then re-enable the certificate management. New certificates will be generated. However, this may result in broken communication (for UI clients) during the time the certificate management is disabled (selfsign certificate will be used as far as I remember unless you specify your own one). So this is definitely not a recommended way to do refresh certificates. ---
**Author:** ![Radoslaw\_Szulgo](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/radoslaw_szulgo/32/1977_2.png) [@Radoslaw\_Szulgo](https://community.dynatrace.com/u/Radoslaw_Szulgo)\ **Post date:** [September 3, 2019, 11:17am UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/8 "2019-09-03T11:17:53Z")
I’m afraid that is not true. When you do it like that, the previous certs (actually keystore) are reverted. ---
**Author:** ![Julius\_Loman](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/julius_loman/32/51_2.png) [@Julius\_Loman](https://community.dynatrace.com/u/Julius_Loman)\ **Post date:** [September 3, 2019, 1:01pm UTC](https://community.dynatrace.com/t/we-are-seeing-that-the-ssl-certificate-of-the-cluster-hosts-expire-in-a-few-days/21799/9 "2019-09-03T13:01:18Z")
Last time I’ve tried this the certs were regenerated. But it could be a coincidence anyway.