Let's Encrypt moves to 64-day certificate lifetimes by default in Feb 2027

jedisct1 · x · 2026-10-11

Let's Encrypt announces that from Feb 10, 2027, all certificates will default to 64-day lifetimes (45 or 6 days optional), with the last 90-day cert expiring May 11, 2027. Staging switches Oct 14, 2026. Clients using ACME Renewal Info (ARI) need no changes; anyone hardcoding renewal dates should renew at 2/3 of lifetime and grep for 83/80/60 in cron jobs and scripts. Authorization reuse drops from 30 to 10 days (7 hours by 2028), and defaults shrink to 45 days in 2028.

Original post →

More from Infra

Infra channel →