▲ 17 r/PKI
Let's Encrypt moving to 64-day validity in early 2027.
https://letsencrypt.org/2026/10/07/64-day-certs
I think this will be a good thing. They already offer, like many CAs, short-lived certs as an option. Moving everyone that doesn't do this down to 64 days should help to find all the little bugs that have been long-standing based on the assumption that everything is 90-day. Would be great if they supported notAfter in the order object, I think.
Auth reuse going down is another good thing - it'd be nice to get to a verify-every-certificate state.
What do people think?
u/isnotnick — 6 days ago