Nick Indge writes that Let's Encrypt is reducing free SSL/TLS certificate lifetimes from 90 to 64 days on February 10, 2027, a move designed to push web administrators toward full ACME automation and ACME Renewal Information rather than hardcoded renewal intervals. A testing period begins October 14, giving operators roughly four months to audit scripts and update hardcoded renewal targets (such as 83, 80, or 60 days) before certificates begin expiring unexpectedly.
- 45-day certificate defaults are planned for 2028.
- Authorization reuse periods will shrink from 30 days to 10 days, eventually reaching seven hours by 2028.
- The shortening timeline aims to eliminate the need for CAA rechecks and reduce damage from compromised or misassigned keys.
- 45-day certificate defaults are planned for 2028.
- Authorization reuse periods will shrink from 30 days to 10 days, eventually reaching seven hours by 2028.
- The shortening timeline aims to eliminate the need for CAA rechecks and reduce damage from compromised or misassigned keys.
