As previously announced, over the next two years we will be switching the default certificate lifetime from 90 days to 64 days, and then 45 days. This will ultimately double the number of certificate renewal requests each day: today we expect renewal around day 60 (of a 90-day certificate), while in the future we expect renewal around day 30 (of a 45-day certificate). If you use an ACME client tha...
In analyzing this situation, it's important to consider the motivations behind the organization's decision. One potential factor could be security enhancement, given that shorter certificate lifetimes reduce vulnerability to outdated certificates. However, the change may also present challenges for users managing a high volume of certificates. It's crucial for these users to ensure their ACME clients support ARI to facilitate automatic renewals.
Patterns detected: none
Root cause: The decision a...