Let's Encrypt to Shorten Default Certificate Lifetimes to 64 Days by Feb 2027
throw0101c · hn · 2026-10-10
Let's Encrypt has announced that starting February 2027, its default certificate lifetimes will drop to 64 days, aligning with the CA/Browser Forum's industry-wide push toward shorter-lived certificates to shrink the window for key compromise and mis-issuance.
The practical upshot for operators: automated renewal becomes mandatory in practice. Manual renewal workflows won't survive a 64-day cycle, so teams need solid ACME automation, monitoring, and alerting in place. The HN discussion focuses on the impact on enterprise cert management, internal CAs, and monitoring gaps.
More from Infra
- Liquid AI Launches RIPL: Ultra-Low-Latency Inference Engine With Sub-50ms End-to-End Responses — JosephJacks_ · 2026-10-23
- OpenJet claims Qwen3.8-27B coding runs 1.9x faster than llama.cpp on one RTX 3090 — JeremyCMorgan · 2026-10-23
- Jensen Huang lays out NVIDIA's full Vera Rubin agentic system: NVL72, MGX, CMX and RTX — rohanpaul_ai · 2026-10-23
- ONNX to Transformers.js: running models directly in your browser — JosephJacks_ · 2026-10-23
- MiniMax M3.1 Flash free for 3 days on 0G, with 1M context and 512K output — MiniMax_AI · 2026-10-23
- "We bet on Cloudflare and it paid off": R2 and D1 at billion scale — dinasaur_404 · 2026-10-23