To clarify this one, It's a 90 day certificate, but it'll auto renew just before that expiry indefinitely.
This is the new cPanel / WHM feature called AutoSSL which we've enabled fleetwide: https://blog.cpanel.com/autossl/
We've opted for the Comodo option instead of LetsEncrypt as it allows...