[Yandex Cloud documentation](../../../index.md) > [Yandex Certificate Manager](../../index.md) > [Step-by-step guides](../index.md) > Let's Encrypt certificate > Renewing a certificate

# Renewing a certificate

Certificate Manager initiates a certificate renewal 30 days prior to its expiration. The certificate status will change to `Renewing`.

{% note info %}

In some cases, a certificate renewal requires no user input. For more information, see [Checking rights automatically](../../concepts/challenges.md#auto). 

{% endnote %}

To renew a Let's Encrypt certificate:

{% list tabs group=instructions %}

- Management console {#console}

    1. In the [management console](https://console.yandex.cloud), select the folder you added the certificate to.
    1. Navigate to **Certificate Manager**.
    1. Select the certificate in the `Renewing` status that you need to renew.
    1. Under **Check rights for domains**, you will see the details required to pass the domain rights check. For more information, see [Domain rights check](../../concepts/challenges.md).
    1. As soon as you pass the domain rights check, its status under **Check rights for domains** will change to `Valid`.
    1. After the check status for all the domains changes to `Valid`, a certificate will be issued and its status will change to `Issued`.

- API {#api}

    To renew a certificate, use the [update](../../api-ref/Certificate/update.md) REST API method for the [Certificate](../../api-ref/Certificate/index.md) resource or the [CertificateService/Update](../../api-ref/grpc/Certificate/update.md) gRPC API call.

{% endlist %}

{% note info %}

For a successful DNS domain rights check based on a `CNAME` record, make sure the `_acme-challenge` subdomain of the domain name you are checking has no other [resource records](../../../dns/concepts/resource-record.md) except `CNAME`. For example, for the `_acme-challenge.example.com.` domain name, there should only be a CNAME record and no TXT record.

{% endnote %}