Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Let's Encrypt will issue 64-day certificates by default from February 10, 2027, ahead of planned 45-day validity in 2028.
Let's Encrypt announced that after February 10, 2027, all newly issued or renewed certificates will have a 64-day validity period, with the last 90-day certificate expiring May 11, 2027. The change aligns with CA/Browser Forum Baseline Requirements and precedes a planned 45-day switch in 2028. Authorization reuse periods will drop to 10 days next year and seven hours in 2028. ACME endpoints, issuance chains, and rate limits are unaffected.
- 64-day default certificate lifetime begins February 10, 2027
- 45-day certificates planned for 2028
- Clients with automated renewals and ARI support need no changes
- Authorization reuse period drops to 10 days, then 7 hours in 2028
From the original article
2 min read at securityweek.com
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.