[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 8 sources · 4 days · First seen · Last updated

Let's Encrypt TLS certificate lifetime reduction

Overview

Let’s Encrypt has announced a plan to reduce the default validity period of its TLS certificates from 90 days to 64 days, effective February 10, 2027. This initiative is part of a long-term security strategy to limit the impact of private key thefts or incorrect certificate assignments by shortening the window of usability for compromised certificates.

Under the new policy, all certificates issued or renewed on or after the effective date will carry the 64-day lifespan, though users may opt for even shorter durations of six or 45 days. Existing certificates will not be revoked and will remain valid until their original expiration dates, with the final 90-day certificates expected to expire by May 11, 2027.

The organization also intends to reduce the domain authorization reuse period from 30 days to 10 days, with a goal of reaching seven hours by 2028. To facilitate the transition and encourage full ACME automation, testing for the 64-day certificates will be available in a staging environment starting October 14, 2026.

Entities

Let's Encrypt

Timeline

  1. [TECHNOLOGY] 3 sources
    Let's Encrypt to reduce TLS certificate validity to 64 days

    Let's Encrypt will reduce default TLS certificate validity from 90 to 64 days starting February 10, 2027, with plans to further decrease lifetimes to 45 days by 2028 to improve web security.

  2. [TECHNOLOGY] 5 sources
    Let's Encrypt to reduce certificate lifetimes to 64 days in 2027

    Let's Encrypt will reduce free SSL/TLS certificate lifetimes from 90 to 64 days starting February 2027 to improve security and drive automation.

Sources

borncity.com · cybernoz.com · iguru.gr · ithome.com · khabaragency.net · linuxiac.com · news.mynavi.jp · science.slashdot.org