Let's Encrypt changes in 2025-2026: OCSP ended, new profiles, 64-day certificates from February 2027
OCSP and expiry emails are gone, client-auth certificates ended, new roots arrived, and default lifetimes drop to 64 days on 10 Feb 2027. A dated checklist.