Let’s Encrypt Shortens Certificates

San Francisco64-day certificates start 10 February 2027, down from 90.

Scripts with fixed renewal offsets risk expired certificates and downtime after the deadline.

Clients supporting ACME Renewal Information let the certificate authority tell them when to renew, so those setups need no change.

Let’s Encrypt opens opt-in testing on 14 October and plans 45-day certificates for 2028.

How each outlet framed it

Ars Technica: stresses the Oct 14 opt-in test window and that hardcoded renewal schedules are the real risk, pointing to 45-day certs in 2028