CYBERSECURITYTRACKER
Permanent story citation

Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9785

As cited

Copy frozen at (site build).

vulnerabilities

Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027

Let's Encrypt will shorten free SSL/TLS certificate validity from 90 days to 64 days starting February 10, 2027. The organization is offering early testing beginning October 14, 2026, for administrators to verify their automation systems handle the shorter lifetime. Organizations relying on manual renewal or fixed schedules must update their processes before the change takes effect to prevent certificate expiration disruptions.

Why it matters: Site operators and hosting providers must ensure their certificate renewal automation supports the new 64-day window or risk unexpected downtime when certificates expire; testing now via Let's Encrypt's trial program helps avoid production failures in February.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027

Let's Encrypt will shorten free SSL/TLS certificate validity from 90 days to 64 days starting February 10, 2027. The organization is offering early testing beginning October 14, 2026, for administrators to verify their automation systems handle the shorter lifetime. Organizations relying on manual renewal or fixed schedules must update their processes before the change takes effect to prevent certificate expiration disruptions.

Why it matters: Site operators and hosting providers must ensure their certificate renewal automation supports the new 64-day window or risk unexpected downtime when certificates expire; testing now via Let's Encrypt's trial program helps avoid production failures in February.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary