I don’t agree that “cert valid for < 60 days” warrants a MEDIUM in this category.
If you look at Letsencrypt, it’s valid for 90 days afaik, not 3 months, but 90 days - and they won’t let you revalidate before 30 days are up, so for this tool the “ok” period is 29-30 days, then the grace period is 1-2 days and then, while LE is perfectly fine to let you renew on day 89, this tools gives you a medium for 58-59 days.
I don’t agree that “cert valid for < 60 days” warrants a MEDIUM in this category.
If you look at Letsencrypt, it’s valid for 90 days afaik, not 3 months, but 90 days - and they won’t let you revalidate before 30 days are up, so for this tool the “ok” period is 29-30 days, then the grace period is 1-2 days and then, while LE is perfectly fine to let you renew on day 89, this tools gives you a medium for 58-59 days.