Incorrect “Renew” date shown in acme.sh --list when using --cert-profile shortlived

[GeistFighter]

Hello,

I’m testing Let’s Encrypt’s new IP address certificates using the short-lived ACME profile on the staging environment.

According to the official announcement from Let’s Encrypt:
https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate

The certificate issuance works perfectly with acme.sh.
Here is the command I used:

acme.sh --issue -d 193.42.XXX.XXX \
  --webroot /var/www/acme \
  --cert-profile shortlived \
  --server https://acme-staging-v02.api.letsencrypt.org/directory \
  --force

The IP certificate is created without any problem.

However, when I run:

acme.sh --list

I get the following line:

Main_Domain     KeyLength  SAN_Domains  Profile     CA                    Created               Renew
193.42.XXX.XXX  "ec-256"   no           shortlived  LetsEncrypt.org_test  2025-11-22T14:31:00Z  2026-01-20T14:31:00Z

The issue is with the Renew value.

Since short-lived IP certificates issued by Let’s Encrypt staging are valid for about 160 hours (≈6–7 days), the “Renew” date shown by acme.sh is incorrect. It displays a renewal time as if the certificate lasted 90 days.

This makes the renewal logic misleading when using:

• --cert-profile shortlived
• Let’s Encrypt’s short-lived IP certificate profile

Expected behavior:
When the certificate profile is shortlived, the “Renew” date should respect the actual validity of the cert (e.g., ~6–7 days), not the default 90-day schedule.

This would ensure automatic renewal behaves correctly and the displayed information matches the real certificate validity.

Thank you for your work on acme.sh.

[Neilpang]

if you use the shortlived cert, please also provide --days 6.

acme.sh --issue ......   --cert-profile shortlived   --staging --days 6

acme.sh has not yet support the ari.

[GeistFighter]

Hi @Neilpang ,

Thanks for the response! Indeed, the --days 6 option perfectly fits my need — I hadn’t noticed it in the wiki, but it’s clearly shown in the --help. Thank you very much for pointing that out.

Maybe it could be helpful to add it to the “How to issue a cert” section as well?

Wishing you a wonderful day, and thanks again!

[Neilpang]

@GeistFighter no problem.
it won't be a problem when ari is supported.

[GeistFighter]

I hadn’t noticed it was actually documented in the profile section here: https://github.com/acmesh-official/acme.sh/wiki/Profile-selection
my bad, sorry

[Neilpang]

nevermind, it's not your fault.