Most HTTPS deployments live in 90-day Let s Encrypt chunks. But for Cloudflare-proxied domains, there is a CA that issues 15-year certificates — here is the auto-issue pipeline that picks between Origin Cert, DNS-01 and HTTP-01 automatically.Read More https://panelica.com/blog/15-year-ssl-certificate-cloudflare-origin-implementation