lets-encrypt

Let's Encrypt is adding two additional remote perspectives to its domain validation process, improving redundancy and resilience in how it verifies domain control for TLS certificate issuance.

Let's Encrypt将于2027年2月10日起把免费SSL/TLS证书有效期从90天缩短至64天，并计划在2028年进一步缩短至45天，以推动ACME自动化续期的普及。

Let's Encrypt announced that starting February 10, 2027, all issued certificates will default to a 64-day lifetime, down from 90 days, as part of a phased plan toward 45-day lifetimes in 2028. The change also reduces authorization reuse periods and encourages users to automate renewal via ARI.

Cloudflare is preparing to become a Certificate Authority itself after acquiring a GlobalSign root certificate, motivated by the systemic risk of relying on Let's Encrypt's concentration in the free TLS certificate market. The move raises questions about whether it will decentralize Web PKI or create an even larger central point.