Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Summary
Let's Encrypt is reducing the default validity period for newly issued certificates to 64 days, with a planned switch to 45 days in February 2027. This change aims to enhance security by ensuring certificates are rotated more frequently.
IFF Assessment
FRIEND
Shorter certificate validity periods improve security by reducing the window of opportunity for compromised certificates to be exploited.
Defender Context
This change from Let's Encrypt necessitates that defenders ensure their systems and processes are configured to handle more frequent certificate renewals. Failure to do so could lead to service disruptions when certificates expire unexpectedly. Organizations should review their automated certificate management systems to accommodate these shorter validity periods.