Let's Encrypt moving to 64-day certificate lifetimes in 2027

Let'sEncrypt, the nonprofit that provides free TLS certificates for millions ofsites, has announced thatit will be moving to certificates with 64-day lifetimes on February10,2027:

This means that any certificate we issue or renew on and after that date willhave a 64 day validity period, and we expect the last 90-day certificate toexpire on May 11, 2027. We will not revoke valid certificates as a part of thisprocess.

This is the second stage of Let's Encrypt's plan, announced in 2025,to move to 45-day certificate lifetimes as required by the the CA/BrowserForum Baseline Requirements. In 2028, Let's Encrypt will switch to 45-day certificates.