Skip to content

Commit e0ac46d

Browse files
authored
Mark TLS Client Auth EKU removal complete (#2277)
Move from upcoming to complete section
1 parent ac3a9aa commit e0ac46d

1 file changed

Lines changed: 5 additions & 5 deletions

File tree

content/en/upcoming-features.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,25 +1,25 @@
11
---
22
title: Upcoming Features
33
slug: upcoming-features
4-
lastmod: 2026-03-16
4+
lastmod: 2026-07-22
55
show_lastmod: 1
66
---
77

88
For announcements of upcoming changes, please [subscribe to the Technical Updates mailing list](https://letsencrypt.org/opt-in/) or see the [API Announcements category](https://community.letsencrypt.org/c/api-announcements/18) on the Let's Encrypt community forum.
99

1010
# Upcoming Features
1111

12-
## Removal of TLS Client Authentication EKU
13-
14-
On February 11, 2026, we [removed the "TLS Client Authentication" Extended Key Usage (EKU)](https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/) from our default certificate profile. As a temporary stop-gap for clients that need more time to migrate, we have a [tlsclient](https://letsencrypt.org/docs/profiles/#tlsclient) profile available. Subscribers who are already using it prior to May 13, 2026 may continue to use it until July 8, 2026.
15-
1612
## Decreasing Certificate Lifetimes to 45 Days
1713

1814
To comply with CA/Browser Forum Baseline Requirement changes, we are
1915
[decreasing certificate lifetimes to 45 days](https://letsencrypt.org/2025/12/02/from-90-to-45). We will first decrease to 64 days on February 10, 2027, and then to 45 days on February 16, 2028. We are also decreasing the authorization reuse period to 10 days, then 7 hours.
2016

2117
# Completed Features
2218

19+
## Removal of TLS Client Authentication EKU
20+
21+
On February 11, 2026, we [removed the "TLS Client Authentication" Extended Key Usage (EKU)](https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/) from our default certificate profile. On July 8, 2026, we retired the temporary [tlsclient](https://letsencrypt.org/docs/profiles/#tlsclient) profile, completing the removal. We no longer issue certificates containing the TLS Client Authentication EKU.
22+
2323
## Shutdown of Expiration Notification Emails
2424

2525
On June 4, 2025, we [turned off our expiration email notification service](https://letsencrypt.org/2025/01/22/ending-expiration-emails/), and deleted all email addresses associated with ACME accounts from our production database.

0 commit comments

Comments
 (0)