GoKawiilLet's Encrypt to shorten default certificate lifespan to 64 days in 2027
Let's Encrypt will reduce the default validity period for its TLS certificates from 90 days to 64 days starting February 10, 2027, unless administrators already opt for shorter 45- or six-day certificates. Existing certificates remain valid until expiration, with the last 90-day certificate expected to expire by May 11, 2027, and no certificates will be revoked during the transition. The organization plans a further cut to 45 days by 2028, and will shrink domain authorization reuse windows from 30 days to 10 days in 2027, and eventually to seven hours by 2028.
GoKawiil's interpretation of the reporting above, not reported fact.
Shorter certificate lifespans limit the window in which a compromised or mis-issued certificate can be exploited, which strengthens overall web security practices. The change could force organizations relying on manual or hardcoded renewal scripts to adopt automated certificate management sooner than planned. The staged rollout—first in test environments, then production—suggests Let's Encrypt is trying to minimize disruption while pushing the industry toward shorter validation cycles.
- Default certificate lifetime drops from 90 to 64 days starting February 10, 2027.
- Further reduction to 45 days is planned for 2028, with domain authorization reuse windows shrinking to as little as seven hours.
- Administrators using cron jobs or fixed renewal intervals should update configurations to avoid lapses.
Source: it.slashdot.org — Posted, 2026-10-12
Published there as: “Let's Encrypt to Cut SSL Certificate Lifetimes to 64 Days in February 2027”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.