Let's Encrypt is reducing SSL/TLS certificate lifetimes from 90 days to 64 days starting February 10, 2027, continuing its push for tighter security and full ACME automation. A test period begins October 14, 2026, and while ARI-supported clients will handle the change seamlessly, administrators relying on hardcoded renewal schedules must update their systems. A 45-day default is planned for 2028, reflecting an ongoing trend toward shorter certificate validity windows.
Background
Let's Encrypt launched in 2016 with 90-day certificates to force HTTPS adoption and automation, replacing an era where certificates were commonly valid for 1–3 years. Shorter lifetimes reduce the damage window from compromised private keys and push the industry toward ACME protocol automation.
- Source
- Ars Technica
- Published
- Oct 9, 2026 at 03:57 AM
- Score
- 7.0 / 10