TLDR InfoSec · MISCELLANEOUS

BLINK AND YOU'LL MISS THEM: 6-DAY CERTIFICATES ARE HERE!

scotthelme.co.uk3 min read

Summary from the TLDR InfoSec newsletter

Let's Encrypt has made 6-day TLS certificates publicly available through its short-lived certificate profile, well ahead of the 2029 industry mandate that reduces maximum validity to 47 days. Google Trust Services also offers short-lived certificates with configurable validity periods as short as a single day. Organizations already using ACME clients for automation can adopt these shorter validity periods with minimal operational changes, since the increased renewal frequency is handled automatically.