← Friday, October 9, 2026Cloud & infraNews

Let’s Encrypt will default to 64-day certificates in February 2027

letsencrypt.org Editor score 7/10

Let’s Encrypt plans to switch subscribers to 64-day certificates on February 10, 2027, and recommends testing renewals in staging and renewing around two-thirds of the certificate lifetime. Operators with date-based renewal logic should update it before the transition.

What

- Let’s Encrypt will default to 64-day certificate lifetimes for subscribers starting February 10, 2027.

How

- Automated ACME renewals using ARI should be ready; hard-coded renewal schedules should be updated to renew at about two-thirds of the certificate lifetime.

Why it matters

- Shorter lifetimes reduce risks from key compromise and mis-issuance, while requiring engineers to verify renewal automation and failure alerts.

Read on letsencrypt.org → Hacker News · 24 commentsLobsters · 2 comments

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.