{"id":624735,"date":"2026-10-08T21:46:12","date_gmt":"2026-10-08T21:46:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/624735\/"},"modified":"2026-10-08T21:46:12","modified_gmt":"2026-10-08T21:46:12","slug":"lets-encrypt-cuts-certificate-lifetimes-to-64-days-starting-february-2027","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/624735\/","title":{"rendered":"Let&#8217;s Encrypt cuts certificate lifetimes to 64 days starting February 2027"},"content":{"rendered":"<p>Let\u2019s Encrypt is continuing a push toward tighter security by reducing free SSL\/TLS certificate lifetimes from 90 days to 64 days, starting February 10, 2027. For administrators already implementing modern <a href=\"https:\/\/en.wikipedia.org\/wiki\/Automatic_Certificate_Management_Environment\" rel=\"nofollow noopener\" target=\"_blank\">ACME<\/a> clients that support <a href=\"https:\/\/letsencrypt.org\/2024\/04\/25\/guide-to-integrating-ari-into-existing-acme-clients\" rel=\"nofollow noopener\" target=\"_blank\">ARI<\/a> (ACME Renewal Information), the change should be seamless. For those still relying on hardcoded renewal schedules or manual processes, February will be the deadline to update before certificates start expiring unexpectedly.<\/p>\n<p>Starting on October 14, Let\u2019s Encrypt will begin testing the 64-day certificates, and interested users can opt in to test their setups before production goes live.<\/p>\n<p><a href=\"https:\/\/arstechnica.com\/information-technology\/2015\/10\/with-goal-of-universal-https-lets-encrypt-reaches-important-milestone\/\" rel=\"nofollow noopener\" target=\"_blank\">Prior to Let\u2019s Encrypt\u2019s launch in early 2016<\/a>, certificates were often issued for as long as one to three years. The service started with 90-day certificates to force renewal automation that didn\u2019t previously exist. Shorter certificate validity periods limited vulnerabilities from private key thefts and encouraged accelerated <a href=\"https:\/\/en.wikipedia.org\/wiki\/HTTPS\" rel=\"nofollow noopener\" target=\"_blank\">HTTPS<\/a> adoption across the web.<\/p>\n<p>This move shook\u00a0 industry norms at the time, but by limiting the certificate lifetime, the certs are less likely to cause damage if compromised or assigned in error. The move down to 64 days continues this logic, and the lifespans will only continue to get shorter as time goes on, with 45-day defaults planned to follow in 2028.<\/p>\n<p>Just as the initial rollout of Let\u2019s Encrypt aimed to push users toward <a href=\"https:\/\/en.wikipedia.org\/wiki\/HTTPS\" rel=\"nofollow noopener\" target=\"_blank\">HTTPS<\/a>, the shortened certificate windows are aimed at moving users to full ACME automation. The <a href=\"https:\/\/en.wikipedia.org\/wiki\/Automatic_Certificate_Management_Environment\" rel=\"nofollow noopener\" target=\"_blank\">ACME<\/a> protocol, and, more specifically, <a href=\"https:\/\/letsencrypt.org\/2024\/04\/25\/guide-to-integrating-ari-into-existing-acme-clients\" rel=\"nofollow noopener\" target=\"_blank\">ARI<\/a> (ACME Renewal Information), allows the certificate authority to tell the client when it\u2019s time to renew. Although ARI does this,\u00a0many deployments are still stuck on scripted update intervals that trigger at fixed offsets like \u201c60 days before expiration.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Let\u2019s Encrypt is continuing a push toward tighter security by reducing free SSL\/TLS certificate lifetimes from 90 days&hellip;\n","protected":false},"author":2,"featured_media":624736,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[111,139,69,145],"class_list":["post-624735","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-new-zealand","tag-newzealand","tag-nz","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/624735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=624735"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/624735\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/624736"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=624735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=624735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=624735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}