If my custom SSL certificate expires, will lets encrypt automatically replace it?

Yes. If you do not actively replace your custom certificate, Upsun will replace it with a LetsEncrypt certificate.

In the case of a customer certificate, if you deploy within 7 days prior to its expiration, Upsun will deploy a new LetsEncrypt certificate to prevent certificate expiry.

If you want to replace your expiring custom certificate with another custom certificate, you’re advised to do this earlier than 7 days prior to the current cert’s expiry.

If you’re already using a LetsEncrypt certificate, redeploying in the 30 days before expiry will refresh the LetsEncrypt certificate.

In all cases, site owners need to make plans for redeploying to keep their certificates fresh.