Tools
Let’s Encrypt 45-day certificates: how to pick the ACME profile in Caddy, Traefik, certbot, acme.sh and lego
Since 13 May 2026, the Let's Encrypt tlsserver profile issues 45-day certificates. The default classic profile moves to 64 days on 10 February 2027 and to 45 days on 16 February 2028. I tested certbot, Caddy, Traefik, acme.sh and lego against Pebble, and all five let you choose the profile.