You should still renew your SSL certificate every year (397 days to be exact).
Some still sell 2 or 3 year certificates but that's a marketing ploy. You pay the price for the next 3 years in advance but you still have to renew it every year.
[1] https://docs.digicert.com/manage-certificates/end-2-year-pub...