Let's Encrypt announces that starting Feb 10, 2027, all certificates will default to 64-day lifetimes (down from 90 days), with staging testing beginning Oct 14, 2026. The CA also reduces authorization reuse from 30 days to 10 days to comply with upcoming 2029 regulations and eliminate CAA rechecking overhead.
Background
Let's Encrypt is the world's largest CA, issuing over 300M certificates. The 90-day default has been standard since 2018. Shorter lifetimes reduce exposure from compromised private keys and align with evolving industry security recommendations.
- Source
- Lobsters
- Published
- Oct 9, 2026 at 03:06 AM
- Score
- 7.0 / 10