“Let’s Encrypt will reduce TLS certificate validity from 90 to 64 days starting February 10, 2027”
64 days now, 45 in 2028, and reused domain validation drops to seven hours. Automate renewals or get paged. Shorter lifetimes are the fix for revocation, which has been broken for twenty years. Every hand-renewed cert on an appliance somewhere is about to become an outage.