Let’s Encrypt Cuts TLS Certificate Lifetimes From 90 to 64 Days Starting February 2027

What happened?

Let’s Encrypt will cut its default TLS certificate lifetime from 90 days to 64 days on February 10, 2027, giving website operators less time between renewals. The change applies to certificates issued or renewed from that date, while subscribers can still choose shorter certificate profiles offering 45 days or roughly six days. Let’s Encrypt Certificate Lifetime According to the October 7 announcement published by Let’s Encrypt, the nonprofit certificate authority confirmed the schedule.

Key details

• Let's Encrypt will reduce default TLS certificate lifetime from 90 days to 64 days starting February 10, 2027.
• Existing certificates will remain valid until their normal expiry dates and will not be revoked during the transition.
• The final 90-day certificate is expected to expire on May 11, 2027.
• Let's Encrypt will issue 64-day certificates in its staging environment starting October 14, 2026 for testing.
• Default certificate profile will move to 45 days on February 16, 2028 as part of the published roadmap.
• Authorization reuse period will decrease from 30 days to 10 days, then to seven hours in 2028.
• Let's Encrypt recommends renewing at about two-thirds of certificate lifetime when ARI is not available, around day 43 for 64-day certificates.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.