&gt; LetsEncrypt intentionally chose 90 days for the duration of the certs. Presumably because renewing a cert is a positive confirmation that you still retain ownership.<p>LetsEncrypt does domain validation only so there is zero check who owns the server.  So no, that makes no sense.  You can already crontab the official client anyways.