Switch from Let's Encrypt to Your product
Let's Encrypt certificates on the default profile: a change is due by February 10. You can stay on Let's Encrypt. If you would rather leave, here is how to move to Your product.
What changes at Let's Encrypt
From February 10, 2027, Let's Encrypt's default profile issues 64-day certificates. From February 16, 2028, it issues 45-day ones. Renewing every 60 days will no longer be enough.
- Default certificates become 64 days: February 10, 2027 (Let's Encrypt)
- Default certificate lifetime from then: 64 days (Let's Encrypt)
- Authorization reuse from then: 10 days (now 30 days) (Let's Encrypt)
- Next step: 45-day certificates from February 16, 2028, with 7 hour authorization reuse (Let's Encrypt)
- Opt-in 45-day profile (tlsserver): Since May 13, 2026 (Let's Encrypt)
- Fixed renewal timers: Renewing every 60 days will no longer be sufficient (Let's Encrypt)
- Let's Encrypt recommends: ACME Renewal Information (ARI), or renewing about two thirds of the way through (Let's Encrypt)
- Staging gets changes: About a month before production (Let's Encrypt)
- Industry rule (CA/Browser Forum): Maximum validity falls from 398 days to 47 days between March 2026 and March 2029 (CA/Browser Forum)
- Sites that renew on a fixed 60-day timer: Will have expired certificates (Let's Encrypt)
You can stay on Let's Encrypt if you make the change. This page is for people who would rather leave.
What Your product gives you
Write two or three short lines here. Say what Your product does, who it is for, and what it costs. Use only facts you can show.
How to move from Let's Encrypt to Your product
- Save what you need from Let's Encrypt. Keep a copy before you cancel anything.
- Import into Your product. Say which files you accept and how long an import takes.
Tell readers the key date: February 10, 2027.
Questions people ask
If Your product has a direct answer to one of these, add it here. Keep it short and true.
How to help new users settle in
Send one short email. Say what changed, where to find you now, and what they need to do. Put the most important line first.
If there is a date, send a short reminder a few days before it. Keep a copy of the list you sent it to.
Sources
- Decreasing Certificate Lifetimes to 45 Days — Let's Encrypt (primary), checked 2026-10-13
- Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods — CA/Browser Forum (primary), checked 2026-10-13