Do Son May 13 Deadline: Let’s Encrypt launches 45-day certs, freezes mTLS, and moves to Gen Y intermediates. Is your automation ready for the triple-threat update?
ACME
Let’s Encrypt moves to Generation Y roots, launches IP address certificates, and sets a path for 45-day lifetimes by 2028. Is your automation ready?
A Catastrophic (CVSS 10.0) Auth Bypass flaw (CVE-2025-44005) in Step CA's ACME/SCEP provisioners allows unauthenticated attackers to issue fraudulent certificates and access restricted infrastructure. Update to v0.29.0.
Following Apple's push, Let's Encrypt will cap all certificate validity at 45 days by 2028. Users must ensure automation is compatible with the significantly shorter lifetime.
NGINX's new ACME module automates SSL/TLS certificate management, allowing users to request and renew certificates directly from the NGINX configuration.