This year we will continue to pursue our commitment to improving the security of the Web PKI by introducing the option to get certificates with six-day lifetimes (“short-lived certificates”). We will also add support for IP addresses in addition to domain names. Our longer-lived certificates, which currently have a lifetime of 90 days, will continue to be available alongside our six-day offering. Subscribers will be able to opt in to short-lived certificates via a certificate profile mechanism being added to our ACME API.

Hacker News is a community-driven platform for sharing and discussing technology news, startups, and programming-related topics. Through user submissions and comments, Hacker News offers insights into emerging technology trends, industry developments, and entrepreneurial ventures. Readers can participate in discussions, share their insights, and stay informed about the latest advancements in technology and innovation.

Hacker News

In 2025, shorter-lived certificates with six-day lifetimes and support for IP addresses will be introduced to improve Web PKI security. These certificates reduce the compromise window associated with long-lived certificates and require automation for issuance. IP address support will enable secure TLS connections to services accessible via IP address without a domain name.

Announcing Six Day and IP Address Certificate Options in 2025

Shorter Certificate Lifetimes Are Good for Security

IP Address Support For Securing Additional Use Cases

How To Get Six-Day and IP Address Certificates