diff --git a/cert-autorefresh b/cert-autorefresh
index 6f1fca5aa53171d5765d680f89c8db72e56c2262..3fe8471c9041946463332d8a9c84c28229764bc1 100755
--- a/cert-autorefresh
+++ b/cert-autorefresh
@@ -15,9 +15,11 @@ set -o pipefail
 
 apitokenfile=$( basename $0 ).apitoken
 apitoken=""
+hostname=""
 verbose=0
 revoke=""
 symlinks=""
+MinExpirationDays=270
 
 #
 # Help
@@ -120,13 +122,13 @@ content=$( ra_portal GET api-token-info | jq )
 #
 
 let tokenExpirationDays=($( date +%s -d $( echo $content | jq -r '.expires_at' )  )-$( date +%s ))/86400
-[ $tokenExpirationDays -lt 90 ] && echo "[WARNING ] API Token '$( echo $content | jq -r '.name' )' expires in $tokenExpirationDays days." || ( [ $verbose -ge 2 ] && echo "[VERBOSE ] API Token '$( echo $content | jq -r '.name' )' expires in $tokenExpirationDays days." )
+[ $tokenExpirationDays -lt $MinExpirationDays ] && echo "[WARNING ] API Token '$( echo $content | jq -r '.name' )' expires in $tokenExpirationDays days." || ( [ $verbose -ge 2 ] && echo "[VERBOSE ] API Token '$( echo $content | jq -r '.name' )' expires in $tokenExpirationDays days." )
 
 #
 # get hostname
 #
 
-if [ -z $hostname ]
+if [ -z "$hostname" ]
 then
     [ $verbose -ge 1 ] && echo "[INFO    ] hostname not set."
     hostname=$( hostname )
@@ -186,7 +188,7 @@ let expiresInCert=($( date +%s -d $expiresAtCert )-$( date +%s ))/86400
 # renew certificate
 #
 
-if [ $expiresInCert -le 28 ]
+if [ $expiresInCert -le $MinExpirationDays ]
 then
     echo "[WARNING ] '$hostname' cert expires in $expiresInCert days."
     if [ $referenceNumberRenew ]