Let’s Encrypt Cuts TLS Certificate Lifetimes From 90 to 64 Days Starting February 2027
Let's Encrypt will cut default TLS certificate lifetimes from 90 to 64 days on February 10, 2027.
Let's Encrypt will reduce its default TLS certificate lifetime from 90 days to 64 days for certificates issued or renewed from February 10, 2027. Existing certificates stay valid until normal expiry, with the last 90-day certificate expected to expire on May 11, 2027, and 64-day certificates will appear in staging on October 14, 2026. The default profile is set to move to 45 days on February 16, 2028, while authorization reuse drops from 30 days to 10 days and later to seven hours. Let's Encrypt says rate limits, ACME endpoints, and issuance chains are unchanged and recommends ACME Renewal Information or renewal at about two-thirds of lifetime.
64