Let's Encrypt TLS Certificate Lifetimes to Drop From 90 to 64 Days Starting February 2027
Help Net Security, Monday, October 12th, 2026
From February 10, 2027 Let's Encrypt certificates default to 64 days; admins should check hardcoded renewal schedules.
Let's Encrypt will issue 64-day certificates by default from February 10, 2027, down from 90 days, as a step toward 45-day defaults in 2028, and its staging environment starts issuing 64-day certificates on October 14, 2026.
ISRG says shorter lifetimes reduce the risk of key compromise and mis-issuance.
Clients that support ACME Renewal Info need no changes, but setups that renew a fixed number of days before expiry should switch to renewing at about two thirds of lifetime and search scripts for hardcoded values like 83, 80 or 60.
Authorization reuse also drops from 30 days to 10.