Post Syndicated from jzb original https://lwn.net/Articles/1099588/

Let’s
Encrypt, the nonprofit that provides free TLS certificates for millions of
sites, has announced that
it will be moving to certificates with 64-day lifetimes on February 10,
2027:

This means that any certificate we issue or renew on and after that date will
have a 64 day validity period, and we expect the last 90-day certificate to
expire on May 11, 2027. We will not revoke valid certificates as a part of this
process.

This is the second stage of Let’s Encrypt’s plan, announced in 2025,
to move to 45-day certificate lifetimes as required by the the CA/Browser
Forum Baseline Requirements. In 2028, Let’s Encrypt will switch to 45-day certificates.