Let's Encrypt to Cut SSL Certificate Lifetimes to 64 Days in February 2027
Linuxiac, Saturday, October 10th, 2026
Let's Encrypt will move default certificates from 90 to 64 days on Feb. 10, 2027, so admins should check renewals.
Let's Encrypt will shorten its default TLS certificate validity from 90 to 64 days for all certificates issued from February 10, 2027, while 45-day and six-day options remain and no existing certificates will be revoked.
64-day certificates arrive in the staging environment on October 14, 2026, so administrators can test renewals early.
ACME clients that support ACME Renewal Info should need no changes, but scripts or cron jobs with hardcoded renewal intervals should switch to renewing at a fraction of the certificate's lifetime.