Let's Encrypt to cut certificate lifetimes to 64 days

Let's Encrypt will switch to 64-day SSL/TLS certificates by default starting February 10, 2027, with optional 45- or 6-day lifetimes. Staging tests begin October 14, 2026, and the authorization reuse period will shrink from 30 days to 10 days.

• All Let's Encrypt certificates will default to 64-day lifetimes from February 10, 2027
• Optional 45- and 6-day lifetimes will be available; the last 90-day certificate expires May 11, 2027
• Testing of 64-day certificates in staging starts October 14, 2026
• Authorization reuse period drops from 30 days to 10 days, then to 7 hours in 2028