# Let’s Encrypt to Cut SSL Certificate Lifetimes to 64 Days in February 2027 **URL:** \ **Category:** Third Party News\ **Created:** [October 12, 2026, 2:13pm UTC](https://forum.virtualmin.com/t/let-s-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/138152 "2026-10-12T14:13:53Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [October 12, 2026, 2:13pm UTC](https://forum.virtualmin.com/t/let-s-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/138152/1 "2026-10-12T14:13:54Z")
I think this has been taken care of already, if not an easy fix I am sure. > **[Let's Encrypt to Cut SSL Certificate Lifetimes to 64 Days in February 2027](https://linuxiac.com/lets-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/)** > > Let's Encrypt will reduce TLS certificate validity from 90 to 64 days starting February 10, 2027, with a further reduction to 45 days planned for 2028. ---
**Author:** ![DrCarsonBeckett](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/drcarsonbeckett/32/650_2.png) [@DrCarsonBeckett](https://forum.virtualmin.com/u/DrCarsonBeckett)\ **Post date:** [October 12, 2026, 2:54pm UTC](https://forum.virtualmin.com/t/let-s-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/138152/2 "2026-10-12T14:54:46Z")
I read about that too. While I do understand why they are doing it and what they want to achieve with it, I don’t think that that is the proper way to do it. While the “most easy” way, yes but I am not sure if its the best way. ---
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [October 12, 2026, 3:09pm UTC](https://forum.virtualmin.com/t/let-s-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/138152/3 "2026-10-12T15:09:52Z")
Firefox built a whole revocation system, shortening certificates was not the easiest way, but it is what they are going with. I think there was something called `OCSP` stapling and the revocation required another server to be run which had the advantage of being very quick to revoke certificates. ---
**Author:** ![Ilia](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/ilia/32/10185_2.png) [@Ilia](https://forum.virtualmin.com/u/Ilia)\ **Post date:** [October 13, 2026, 3:28am UTC](https://forum.virtualmin.com/t/let-s-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/138152/4 "2026-10-13T03:28:15Z")
We will address it in advance in the following patch: > > > Hey Jamie, > > This PR fixes automatic ACME certificate renewal starting too early …for shorter certificate lifetimes, as discussed in \[Virtualmin forum topic 138152\](https://forum.virtualmin.com/t/let-s-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/138152). > > Renewal can now start at most one-third of the certificate lifetime before expiry, or one-half for certificates valid for less than ten days. A 45-day certificate becomes eligible for renewal 15 days before expiry. A 6-day IP certificate becomes eligible after about 3 and a half days instead of immediately after issuance and on every hourly check. > > The "Days before expiry to renew SSL certificates" template option is removed, and existing custom values are ignored. The hidden \`acme\_renewal\_max\_days\` module configuration key can still reduce the default 21-day window, while the lifetime-based limit prevents larger values from starting renewal too early. > > The separate 5-day check for IP address certificates is removed because the lifetime-based window already provides a stricter limit for these short-lived certificates. ---
**Author:** ![DrCarsonBeckett](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/drcarsonbeckett/32/650_2.png) [@DrCarsonBeckett](https://forum.virtualmin.com/u/DrCarsonBeckett)\ **Post date:** [October 13, 2026, 7:27am UTC](https://forum.virtualmin.com/t/let-s-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/138152/5 "2026-10-13T07:27:06Z")
> [@Ilia](#): > > We will address it in advance in the following patch: As fast as always. 😄 > [@shoulders](#): > > Firefox built a whole revocation system Which, in my eyes at least, is the correct way to do it. ---
**Author:** ![system](https://cdn.forum.virtualmin.com/uploads/default/original/2X/c/cd96d761e326db4b2bef94886a639109bd7a8e76.svg) [@system](https://forum.virtualmin.com/u/system)\ **Post date:** [November 2, 2026, 7:27am UTC](https://forum.virtualmin.com/t/let-s-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/138152/6 "2026-11-02T07:27:23Z")
Closed on November 2, 2026, 7:27am UTC This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.