Let's Encrypt changing cert expiry timeframe

[JedMeister]

We will need to update the cert renew period in our Let's Encrypt integration because Let's Encrypt are moving to 45 day cert expiry by Feb 2028. It is a staged migration with the first step (relevant to us) being a change to 64 day expiry in Feb 2027.

I'm inclined to at least update the cron job to handle the anticipated change in ~7 months. But there is probably a good argument for anticipating the 2028 change too?

Thoughts?

@OnGle @marcos-mendez @l-arnold @UncleDan @a3s7p

[a3s7p]

The cron job is daily and the expiration check is done inside it.

There is nothing we need to do in terms of actually renewing the certificate.

However LE recommend to start attempting renewal at ⅔ of the lifetime (with ⅓ left).

That would mean changing line 6 to say 15 days instead.

But it seems we can skip checking the expiration completely because dehydrated does the same thing internally.