On February 10, 2027, all Let’s Encrypt subscribers will move to certificates with 64 day lifetimes by default unless they select an even shorter lifetime (45 or 6 days, as previously announced). This means that any certificate we issue or renew on and after that date will have a 64 day validity period, and we expect the last 90-day certificate to expire on May 11, 2027. We will not revoke valid certificates as a part of this process.
I think the specific choice of 64 days is quite clever. Most ACME clients out there that don’t yet use ARI are set up to renew after 60 days, which means anybody still running these will now still not run into expiry but will get a bunch of “your certs are about to expire” warnings from Let’s Encrypt and also potentially their own monitoring, so they can update their automation accordingly. I think this choice demonstrates quite a bit of forethought and care for their users, kudos!
I think the specific choice of 64 days is quite clever. Most ACME clients out there that don’t yet use ARI are set up to renew after 60 days, which means anybody still running these will now still not run into expiry but will get a bunch of “your certs are about to expire” warnings from Let’s Encrypt and also potentially their own monitoring, so they can update their automation accordingly. I think this choice demonstrates quite a bit of forethought and care for their users, kudos!
score 1 · canonical
Nitpick : LE stopped sending such notices https://letsencrypt.org/2025/01/22/ending-expiration-emails
score 1 · canonical