GoKawiilLet's Encrypt to shorten default certificate lifespan to 64 days in 2027
Let's Encrypt will reduce the default validity period for its TLS certificates from 90 days to 64 days starting February 10, 2027, unless administrators already opt for shorter 45- or six-day certificates. Existing certificates remain valid until expiration, with the last 90-day certificate expected to expire by May 11, 2027, and no certificates will be revoked during the transition. The organization plans a further cut to 45 days by 2028, and will shrink domain authorization reuse windows from 30 days to 10 days in 2027, and eventually to seven hours by 2028.