www.google.com:443
Ready for 47-day certificates: renewal looks automated

certificate  www.google.com, issued by WE2 (Google Trust Services)
lifetime     84 days (2026-09-28 to 2026-12-21), 62 left
renewal      probably automated
ari window   2026-11-23T18:32:42Z to 2026-11-23T19:32:42Z (ahead)

PASS  15 March 2026 (in force)       max 200 days, ~ 3 renewals/yr  Automated renewal absorbs it: about 3 renewals a year, none of them by hand.
PASS  15 March 2027                  max 100 days, ~ 6 renewals/yr  Automated renewal absorbs it: about 6 renewals a year, none of them by hand.
PASS  15 March 2029                  max  47 days, ~12 renewals/yr  Automated renewal absorbs it: about 12 renewals a year, none of them by hand.

PASS  Certificate lifetime: 84 days
      Already within the 100-day limit that applies from 15 March 2027.
PASS  Renewal automation: probably automated
      A 84-day certificate from Google Trust Services. Nobody renews certificates this short by hand for long, so a client is almost certainly doing it.
PASS  Renewal timing: 62 of 84 days left
      No renewal is due yet.
PASS  ARI renewal window: 2026-11-23 to 2026-11-23
      Google Trust Services publishes when it wants this certificate renewed, and an ARI-aware ACME client follows it. That is how a CA gets millions of certificates replaced in hours when it has to revoke them.
PASS  Edges: 8 addresses, one certificate
      Every address the name resolves to serves the same certificate, so the last renewal reached all of them.

# every address for www.google.com
142.251.152.119:443                      2026-09-28 to 2026-12-21  Google Trust Services  6F77F1313EE0FC7A  <- this report
142.251.157.119:443                      2026-09-28 to 2026-12-21  Google Trust Services  6F77F1313EE0FC7A  <- this report
142.251.156.119:443                      2026-09-28 to 2026-12-21  Google Trust Services  6F77F1313EE0FC7A  <- this report
142.251.150.119:443                      2026-09-28 to 2026-12-21  Google Trust Services  6F77F1313EE0FC7A  <- this report
142.251.155.119:443                      2026-09-28 to 2026-12-21  Google Trust Services  6F77F1313EE0FC7A  <- this report
142.251.153.119:443                      2026-09-28 to 2026-12-21  Google Trust Services  6F77F1313EE0FC7A  <- this report
142.251.154.119:443                      2026-09-28 to 2026-12-21  Google Trust Services  6F77F1313EE0FC7A  <- this report
142.251.151.119:443                      2026-09-28 to 2026-12-21  Google Trust Services  6F77F1313EE0FC7A  <- this report

reproduce: for ip in $(dig +short www.google.com A www.google.com AAAA); do echo "$ip $(echo | openssl s_client -connect "[$ip]:443" -servername www.google.com 2>/dev/null | openssl x509 -noout -enddate)"; done