SSL certificates drop to 64 days in Feb 2027: what to check

From 10 February 2027, free SSL certificates from Let's Encrypt will last 64 days instead of 90. Most business websites renew automatically and need nothing. If your SSL is renewed by hand, by a script with a fixed date, or on a server someone set up years ago, check it before February, or the padlock may break and visitors will see a security warning.

What is changing?

Let's Encrypt announced on 7 October 2026 that every certificate it issues or renews on or after 10 February 2027 will be valid for 64 days. The last 90-day certificates should expire around 11 May 2027. Certificates already issued are not cancelled. A further cut to 45 days is planned for 2028.

The reason, in Let's Encrypt's words, is that shorter lifetimes reduce "the risk of key compromise and mis-issuance".

Does my website need any change?

On most shared hosting with cPanel or a similar panel, the host renews SSL for you, and the shorter lifetime only means it renews more often. You need to look closer if:

• someone renews your certificate by hand every few months;
• a script or cron job renews at a fixed number of days, such as 60 or 80 days after issue (Let's Encrypt suggests renewing at about two thirds of the lifetime instead);
• your site runs on its own server or VPS with an old copy of Certbot. On the Let's Encrypt forum, experienced users say version 4.0 is the minimum for shorter certificates, and 5.0 or newer handles the new renewal timing best.

What to do

1. Open your site in a browser, click the padlock and look at the certificate dates. If it shows about 90 days and renews on its own, you are fine.
2. Ask whoever manages your server or VPS how renewal works and which Certbot version is installed.
3. Set a reminder for mid February 2027 to open the site and check the padlock again.
4. Make sure someone gets an email if a renewal fails.

How SyncTech can help

On our business web hosting free SSL renews automatically, and SSL checks are part of our WordPress care plans.

Source and credit

We are sharing this news from Let's Encrypt. This summary is written by Synctech in our own words.

• 64-Day Certificate Lifetimes Coming Feb 2027, Let's Encrypt, 7 October 2026: https://letsencrypt.org/2026/10/07/64-day-certs.html
• 64-day certificates: anything to change in a default certbot setup?, Let's Encrypt Community Support, 30 October 2026: https://community.letsencrypt.org/t/64-day-certificates-anything-to-change-in-a-default-certbot-setup/252576 Retrieved 31 October 2026. Let's Encrypt, Certbot and cPanel are trademarks of their owners. Synctech is not connected with them. This is general information, not legal, tax or financial advice. If anything here is wrong, email support@synctech.com.my and we will correct it.