01letsencrypt.org
64-Day Certificate Lifetimes Coming Feb 2027
Let’s Encrypt will default to 64-day certificates on February 10, 2027, with 45- or 6-day profiles available. Staging switches on October 14, 2026. Automated ACME clients supporting ACME Renewal Info (ARI) should require no changes; date-based renewal logic should instead renew around two-thirds of certificate lifetime. Existing valid certificates will not be revoked. Authorization reuse drops from 30 to 10 days, then seven hours in 2028. Rate limits, ACME endpoints, and issuance chains are unchanged.