Let's Encrypt moving to 64-day certificate lifetimes in 2027 (lwn.net)

<p><a href="https://letsencrypt.org/2026/10/07/64-day-certs.html">Let's
Encrypt</a>,
the nonprofit that provides free TLS certificates for millions of
sites, has <a
href="https://letsencrypt.org/2026/10/07/64-day-certs.html">announced</a> that
it will be moving to certificates with 64-day lifetimes on February&#160;10,
2027:</p>

<blockquote class="bq">
<p>This means that any certificate we issue or renew on and after that date will
have a 64 day validity period, and we expect the last 90-day certificate to
expire on May 11, 2027. We will not revoke valid certificates as a part of this
process.</p>
</blockquote>

<p>This is the second stage of Let's Encrypt's plan, <a
href="https://letsencrypt.org/2025/12/02/from-90-to-45">announced in 2025</a>,
to move to 45-day certificate lifetimes as required by the the <a
href="https://cabforum.org/working-groups/server/baseline-requirements/requirements/">CA/Browser
Forum
Baseline Requirements</a>. In 2028, Let's Encrypt will switch to 45-day certificates.</p>