Let's Encrypt (Internet Security Research Group)

Rule Changes

Staging environment issuing 64-day certificates; production switch scheduled for February 10, 2027

Let's Encrypt will cut its default certificate lifetime from 90 days to 64 days starting February 10, 2027. It's the first reduction in the nonprofit certificate authority's history, and a step toward 45-day certificates in 2028.

Updated Nov 1

Rule Changes

As of September 2026: Added U.S. sanctions compliance clause to its user agreement in summer 2026

Millions of Iranians who bank online now hit a red browser warning when they open their bank's website: 'Your connection is not secure.' Iranian banks are losing their SSL certificates, the digital IDs that prove a website is real, because the certificate authorities that issue them have stopped working with sanctioned institutions.

Updated Sep 14