Upcoming Let’s Encrypt Profile Changes On May 13

API Announcements
1

Let’s Encrypt will be making three previously-announced changes in one week, on May 13, 2026:

  • The tlsserver ACME profile will switch to 45-day certificates. This profile is opt-in, for use by early adopters. The full timeline of shortening our certificates’ lifetime to 45 days over the next two years can be found in our blog post, Decreasing Certificate Lifetimes to 45 Days.
  • The tlsclient ACME profile will only be available to ACME accounts which have previously requested a certificate from that profile. That profile will be available until July 8, 2026. For more details, see Ending TLS Client Authentication Certificate Support.
  • The classic ACME profile will switch to using our new "Generation Y" intermediates. These intermediates chain to our existing X1 and X2 roots, so this change should not introduce compatibility issues.

These changes are live in our staging environment now.

You can learn more about profiles here.

16 Likes