ACME Renewal Information (ARI): smarter renewal scheduling explained

ACME Renewal Information (ARI) is a CA-provided hint about when to renew a certificate. Let’s Encrypt documents it so clients do not all renew in the same hour and trip rate limits.

ARI is not:

• a replacement for your own next_renewal_at;
• proof that the replacement is served;
• available identically from every CA.

Use ARI as an input to scheduling. Keep inventory, retries and Action Required. If a CA asks you to renew earlier than your default 30-day lead time, prefer the CA hint only when you understand the reason (revocation window, mass reissue).

sslcertificates.io documents renewals as next_renewal_at = notAfter − renew_before_days (default 30). ARI, where a CA offers it, is additional information — not a silent override you cannot audit.