Update "Upcoming Features" page (#2100)

* Add 90-to-45 change
* Update static CT log entry to indicate logs are now trusted
* Replace ARI draft with RFC 9773 URL

Author: mcpherrinm

content/en/upcoming-features.md

@@ -1,7 +1,7 @@
 ---
 title: Upcoming Features
 slug: upcoming-features
-lastmod: 2025-07-31
+lastmod: 2025-12-12
 show_lastmod: 1
 ---
 
@@ -19,7 +19,12 @@ Around the end of 2025, we intend to allow any client which requests a shortlive
 
 ## Removal of TLS Client Authentication EKU
 
-On Feb 11, 2026, we intend to [remove the "TLS Client Authentication" Extended Key Usage (EKU)](https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/) from our default certificate profile. Prior to that date, we will offer an alternative profile which will still contain that EKU, but note that this will be a temporary stop-gap for clients that need more time to migrate away from needing it: that alternate profile will go away on May 13, 2026.
+On February 11, 2026, we intend to [remove the "TLS Client Authentication" Extended Key Usage (EKU)](https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/) from our default certificate profile. Prior to that date, we will offer an alternative profile which will still contain that EKU, but note that this will be a temporary stop-gap for clients that need more time to migrate away from needing it: that alternate profile will go away on May 13, 2026.
+
+## Decreasing Certificate Lifetimes to 45 Days
+
+To comply with CA/Browser Forum Baseline Requirement changes, we are
+[decreasing certificate lifetimes to 45 days](https://letsencrypt.org/2025/12/02/from-90-to-45). We will first decrease to 64 days on February 10, 2027, and then to 45 days on February 16, 2028. We are also decreasing the authorization reuse period to 10 days, then 7 hours.
 
 # Completed Features
 
@@ -43,10 +48,10 @@ Clients which support the [draft ACME Profiles extension](https://www.ietf.org/a
 
 Enabled: [March 14, 2024](https://letsencrypt.org/2024/03/14/introducing-sunlight/)
 
-We now operate Certificate Transparency (CT) logs which conform to the new [Static CT API Spec](https://c2sp.org/static-ct-api), running the [Sunlight](https://github.com/FiloSottile/sunlight) software. Now that various CT log programs have updated their policies to accept this new kind of log, we intend to submit our logs for inclusion in those programs soon.
+We now operate Certificate Transparency (CT) logs which conform to the new [Static CT API Spec](https://c2sp.org/static-ct-api), running the [Sunlight](https://github.com/FiloSottile/sunlight) software. These logs are now usable to fulfill browser's CT requirements. The [CT Logs Documentation](https://letsencrypt.org/docs/ct-logs/) has a list of our current logs.
 
 ## ACME Renewal Information (ARI)
 
 Enabled: [March 23, 2023](https://letsencrypt.org/2023/03/23/improving-resliiency-and-reliability-with-ari/).
 
-We now provide suggested renewal windows for all issued certificates, which clients can query using the [ACME ARI extension](https://www.ietf.org/archive/id/draft-ietf-acme-ari-08.html).
+We now provide suggested renewal windows for all issued certificates, which clients can query using the [ACME ARI extension](https://www.rfc-editor.org/rfc/rfc9773.html).