Skip to content

Commit a47750b

Browse files
authored
Mark shortlived & IPs as complete (#2105)
1 parent 3943d69 commit a47750b

File tree

1 file changed

+10
-9
lines changed

1 file changed

+10
-9
lines changed

content/en/upcoming-features.md

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,14 @@
11
---
22
title: Upcoming Features
33
slug: upcoming-features
4-
lastmod: 2025-12-12
4+
lastmod: 2025-12-17
55
show_lastmod: 1
66
---
77

88
For announcements of upcoming changes, please [subscribe to the Technical Updates mailing list](https://letsencrypt.org/opt-in/) or see the [API Announcements category](https://community.letsencrypt.org/c/api-announcements/18) on the Let's Encrypt community forum.
99

1010
# Upcoming Features
1111

12-
## Short-lived Certificates
13-
14-
Around the end of 2025, we intend to allow any client which supports ACME Profiles (see below) to [request a "shortlived" certificate](https://letsencrypt.org/2025/02/20/first-short-lived-cert-issued/). These certificates are valid for such a short time that they do not need to have revocation information embedded in them at all.
15-
16-
## IP Address Certificates
17-
18-
Around the end of 2025, we intend to allow any client which requests a shortlived certificate (see above) to also request that the certificate [contain IP Addresses](https://letsencrypt.org/2025/02/20/first-short-lived-cert-issued/) in its Subject Alternative Names. These addresses will be [validated in much the same way as DNS Names](https://www.rfc-editor.org/rfc/rfc8738.html) are today.
19-
2012
## Removal of TLS Client Authentication EKU
2113

2214
On February 11, 2026, we intend to [remove the "TLS Client Authentication" Extended Key Usage (EKU)](https://letsencrypt.org/2025/05/14/ending-tls-client-authentication/) from our default certificate profile. Prior to that date, we will offer an alternative profile which will still contain that EKU, but note that this will be a temporary stop-gap for clients that need more time to migrate away from needing it: that alternate profile will go away on May 13, 2026.
@@ -55,3 +47,12 @@ We now operate Certificate Transparency (CT) logs which conform to the new [Stat
5547
Enabled: [March 23, 2023](https://letsencrypt.org/2023/03/23/improving-resliiency-and-reliability-with-ari/).
5648

5749
We now provide suggested renewal windows for all issued certificates, which clients can query using the [ACME ARI extension](https://www.rfc-editor.org/rfc/rfc9773.html).
50+
51+
## Short-lived Certificates
52+
53+
Client may [request a "shortlived" certificate](https://letsencrypt.org/2025/02/20/first-short-lived-cert-issued/) using ACME Profiles. These certificates are valid for such a short time that they do not need to have revocation information embedded in them at all.
54+
55+
## IP Address Certificates
56+
57+
Shortlived certificates (see above) can request that the certificate [contain IP Addresses](https://letsencrypt.org/2025/02/20/first-short-lived-cert-issued/) in its Subject Alternative Names. These addresses will be [validated in much the same way as DNS Names](https://www.rfc-editor.org/rfc/rfc8738.html) are today.
58+

0 commit comments

Comments
 (0)