Guides
What the shorter certificate lifetimes mean in practice, with every date and rule linked to its primary source.
Let’s Encrypt 64-day certificates: what changes on February 10, 2027From February 10, 2027 Let’s Encrypt’s default certificates last 64 days, and 45 days from February 16, 2028. What changes, who needs to act, and how to check your renewal setup.Bought an SSL certificate? What the 200/100/47-day limits mean for youMulti-year SSL plans are now delivered as a series of shorter certificates. What the CA/Browser Forum limits mean if you buy from GoDaddy, Namecheap or another reseller, and how to stop reinstalling by hand.Do I still need to buy an SSL certificate?Most hosts and platforms now include free, automatically renewed certificates. When a free certificate is enough, and the few cases where a paid one still makes sense.How to automate SSL renewal (ACME) on shared hostingStep-by-step options to stop renewing certificates by hand on shared hosting: cPanel AutoSSL, Plesk SSL It!, your host’s free SSL, and reseller automation tools.Let’s Encrypt stopped expiry emails: how to get reminders nowLet’s Encrypt ended its expiration emails on June 4, 2025. Free ways to get certificate expiry reminders today, and why monitoring matters more as lifetimes shrink.Email (admin@) domain validation ends March 15, 2028: what certificate buyers must changeFrom March 15, 2028, certificate authorities can no longer validate domains by email to admin@, webmaster@ and similar addresses. Who this affects and how to switch to DNS or file validation.