Keep it renewing · 7.5
After an outage or an upgrade
When the service starts, a renewal whose stored time has passed is run immediately. TLSPilot does not draw a new time. The cycle that was missed while the service was down is not run. The next cycle is the next configured time. If a target’s certificate expires before that cycle, or the emergency switch applies, that certificate is still renewed and deployed at once.
A certificate that is already inside its renewal window when you upgrade is treated as a missed renewal and is caught up at that start.
Service starts after downtime or an upgrade.
Stored renewal time already passed → renew now. Do not draw a new time. Deploy at the next cycle, unless an immediate case in 7.3 applies.
A cycle slot that passed while the service was down → skip it. Next cycle is the next configured time.