Question
When does the /usr/local/cpanel/bin/checkallsslcerts command replace the cPanel hostname certificate?
Answer
Hostname certificates are renewed three days before expiration if the certificate is provided by a third party. cPanel provided certificates renew 25 days before expiration.