On February 10, 2027, all Let’s Encrypt subscribers will move to certificates with 64 day lifetimes by default unless they select an even shorter lifetime (45 or 6 days, as previously announced). This means that any certificate we issue or renew on and after that date will have a 64 day validity period, and we expect the last 90-day certificate to expire on May 11, 2027. We will not revoke valid certificates as a part of this process.
Make sure your ACME client supports ARI so that it automatically adjusts its renewal schedule and gracefully handles revocation and early reissue. Even 45 day certs will be renewed weeks in advance so a CA outage should not be a big deal.
My acme clients will if anything goes wrong
score 1 · canonical
Make sure your ACME client supports ARI so that it automatically adjusts its renewal schedule and gracefully handles revocation and early reissue. Even 45 day certs will be renewed weeks in advance so a CA outage should not be a big deal.
score 1 · canonical