Mostly 90 days, and we recommend renewing at 60 days for 90 day certs. That gives more than four weeks of leeway.
If you're one of the few early adopters of short-lived (6-day) certs you should renew at 3 days, giving you 3 days for a successful renewal. A 90 minute outage, even if it was a full outage, would not interfere with a successful renewal.
How's the push for 48 hour certificates going?
> If you're one of the few early adopters of short-lived (6-day) certs you should renew at 3 days
Apparently certificates are becoming OCSP-only with a TTL.