Let's Encrypt Goes to 64-Day Certificates: When Does Your ACME Client Actually Renew?
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Let's Encrypt's staging environment began issuing 64-day certificates on 14 October 2026, ahead of the production default on 10 February 2027 and 45 days in 2028. DevOps Daily tested five ACME client installs. Clients using ARI (certbot 5.8, acme.sh 3.1.6, lego 5.5.2) renewed around day 42 of 64, the same two-thirds share as at 45 and 90 days. acme.sh 3.0.7 scheduled renewal at day 59, or day 79 with --days 80, after expiry. Upgrading fixed it. The test used staging and one certificate per setup.