/etc/cron.d/certbot

# /etc/cron.d/certbot: crontab entries for the certbot package
#
# Upstream recommends attempting renewal twice a day
#
# Eventually, this will be an opportunity to validate certificates
# haven't been revoked, etc.  Renewal will only occur if expiration
# is within 30 days.
SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && 
certbot -q renew

See also

• Certbot, Let's Encrypt: certbot (command), plugins, OCSP, certbot certificates, certbot renew (examples), /var/log/letsencrypt/letsencrypt.log, Certificate Checker, Certbot changelog, certbot --help, /etc/letsencrypt/