letsencrypt · scottmakestech · Feb 24, 2026 · Feb 23, 2026 · Feb 23, 2026 · ludekjanda
diff --git a/content/en/post/2024-07-23-replacing-OCSP-with-CRLs.md b/content/en/post/2024-07-23-replacing-OCSP-with-CRLs.md
@@ -3,7 +3,7 @@ author: Josh Aas
 date: 2024-07-23T00:00:00Z
 excerpt: "Moving to a more privacy-respecting and efficient method of checking certificate revocation."
 title: "Intent to End OCSP Service"
-display_default_footer: false
+display_support_us_footer: false
 slug: replacing-OCSP-with-CRLs
 ---
 

diff --git a/content/en/post/2024-12-05-Ending-OCSP.md b/content/en/post/2024-12-05-Ending-OCSP.md
@@ -3,7 +3,7 @@ author: Josh Aas
 date: 2024-12-05T00:00:00Z
 excerpt: "Certificate revocation information will be provided exclusively through CRLs."
 title: "Ending OCSP Support in 2025"
-display_default_footer: false
+display_support_us_footer: false
 slug: Ending-OCSP
 ---
 

diff --git a/content/en/post/2024-12-11-EOY-letter-2024.md b/content/en/post/2024-12-11-EOY-letter-2024.md
@@ -4,7 +4,7 @@ date: 2024-12-11T00:00:00Z
 slug: EOY-letter-2024
 title: "A Note from our Executive Director"
 excerpt: "Reflecting on a decade of growth, innovation, and impact at ISRG."
-display_default_footer: true
+display_support_us_footer: true
 ---
 
 <div class="card border-0 pic-quote-right">

diff --git a/content/en/post/2025-01-09-acme-profiles.md b/content/en/post/2025-01-09-acme-profiles.md
@@ -4,7 +4,7 @@ date: 2025-01-09T00:00:00Z
 slug: acme-profiles
 title: "Announcing Certificate Profile Selection"
 excerpt: "New extension makes it possible for site operators and ACME clients to select new profile options for Let's Encrypt certificates."
-display_default_footer: true
+display_support_us_footer: true
 ---
 
 We are excited to announce a new extension to Let's Encrypt's implementation of the ACME protocol that we are calling "profile selection." This new feature will allow site operators and ACME clients to opt in to the next evolution of Let's Encrypt.

diff --git a/content/en/post/2025-01-16-6-day-and-IP-certs.md b/content/en/post/2025-01-16-6-day-and-IP-certs.md
@@ -4,7 +4,7 @@ date: 2025-01-16T00:00:00Z
 slug: 6-day-and-IP-certs
 title: "Announcing Six Day and IP Address Certificate Options in 2025"
 excerpt: "In addition to our standard certificates, Let’s Encrypt will introduce new short-lived certificates to improve security and agility for the Web PKI."
-display_default_footer: true
+display_support_us_footer: true
 ---
 
 This year we will continue to pursue our commitment to improving the security of the Web PKI by introducing the option to get certificates with six-day lifetimes ("short-lived certificates"). We will also add support for IP addresses in addition to domain names. Our longer-lived certificates, which currently have a lifetime of 90 days, will continue to be available alongside our six-day offering. Subscribers will be able to opt in to short-lived certificates via a certificate profile mechanism being added to our ACME API.

diff --git a/content/en/post/2025-01-22-ending-expiration-emails.md b/content/en/post/2025-01-22-ending-expiration-emails.md
@@ -4,7 +4,7 @@ date: 2025-01-22T00:00:00Z
 slug: ending-expiration-emails
 title: "Ending Support for Expiration Notification Emails"
 excerpt: "We will no longer send email reminders about upcoming certificate expirations."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: true
 ---
 

diff --git a/content/en/post/2025-01-30-Scaling-Rate-Limits.md b/content/en/post/2025-01-30-Scaling-Rate-Limits.md
@@ -4,7 +4,7 @@ date: 2025-01-30T00:00:00Z
 slug: Scaling-Rate-Limits
 title: "Scaling Our Rate Limits to Prepare for a Billion Active Certificates"
 excerpt: "We've evolved our rate limits to better serve our subscribers and keep our service healthy."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-02-14-encryption-for-everybody.md b/content/en/post/2025-02-14-encryption-for-everybody.md
@@ -4,7 +4,7 @@ date: 2025-02-14T00:00:00Z
 slug: encryption-for-everybody
 title: "Encryption for Everybody"
 excerpt: "Celebrating ten years of Let's Encrypt."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-02-20-first-short-lived-cert-issued.md b/content/en/post/2025-02-20-first-short-lived-cert-issued.md
@@ -4,7 +4,7 @@ date: 2025-02-20T00:00:00Z
 slug: first-short-lived-cert-issued
 title: "We Issued Our First Six Day Cert"
 excerpt: "Hitting a milestone on our path toward optional shorter-lived certs."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-03-18-community-of-funders.md b/content/en/post/2025-03-18-community-of-funders.md
@@ -4,7 +4,7 @@ date: 2025-03-18T00:00:00Z
 slug: community-of-funders
 title: "Ten Years of Let's Encrypt: Announcing support from Jeff Atwood"
 excerpt: "Seeking to inspire our community of supporters, Jeff Atwood commits $1M to support Let's Encrypt."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-04-30-pebbleacmeimplementation.md b/content/en/post/2025-04-30-pebbleacmeimplementation.md
@@ -4,7 +4,7 @@ date: 2025-04-30T00:00:00Z
 slug: pebbleacmeimplementation
 title: "How Pebble Supports ACME Client Developers"
 excerpt: "Our tiny ACME implementation is great for testing and debugging."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-05-14-ending-tls-client-authorization.md b/content/en/post/2025-05-14-ending-tls-client-authorization.md
@@ -4,7 +4,7 @@ date: 2025-05-14T00:00:00Z
 slug: ending-tls-client-authentication
 title: "Ending TLS Client Authentication Certificate Support in 2026"
 excerpt: "Let's Encrypt will no longer include the \"TLS Client Authentication\" Extended Key Usage (EKU) in our certificates beginning in 2026. Most users who use Let's Encrypt to secure websites won't be affected and won't need to take any action."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-05-21-power-of-recurring-donations.md b/content/en/post/2025-05-21-power-of-recurring-donations.md
@@ -4,7 +4,7 @@ date: 2025-05-21T00:00:00Z
 slug: power-of-recurring-donations
 title: "Sustaining a More Secure Internet: The Power of Recurring Donations"
 excerpt: "Recurring donations empower Let’s Encrypt to maintain a secure and privacy-respecting Internet, allowing us to innovate and plan for the future with confidence."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-06-04-how-we-reduced-the-impact-of-zombie-clients.md b/content/en/post/2025-06-04-how-we-reduced-the-impact-of-zombie-clients.md
@@ -4,7 +4,7 @@ date: 2025-06-04T00:00:00Z
 slug: how-we-reduced-the-impact-of-zombie-clients
 title: "How We Reduced the Impact of Zombie Clients"
 excerpt: "A new rate limit significantly reduced the load on our infrastructure."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-06-11-reflections-on-a-year-of-sunlight.md b/content/en/post/2025-06-11-reflections-on-a-year-of-sunlight.md
@@ -4,7 +4,7 @@ date: 2025-06-11T00:00:00Z
 slug: reflections-on-a-year-of-sunlight
 title: "Reflections on a Year of Sunlight"
 excerpt: "Our experiment with a new Certificate Transparency architecture has been a success."
-display_default_footer: true
+display_support_us_footer: true
 ---
 
 The Certificate Transparency ecosystem has been improving transparency for the web PKI since 2013. It helps make clear exactly what certificates each certificate authority has issued and makes sure errors or compromises of certificate authorities are detectable.

diff --git a/content/en/post/2025-06-26-expiration-notification-service-has-ended.md b/content/en/post/2025-06-26-expiration-notification-service-has-ended.md
@@ -4,7 +4,7 @@ date: 2025-06-26T00:00:00Z
 slug: expiration-notification-service-has-ended
 title: "Expiration Notification Service Has Ended"
 excerpt: "Let's Encrypt ended its certificate-expiration notification emails on June 4, 2025."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: true
 ---
 

diff --git a/content/en/post/2025-07-01-issuing-our-first-ip-address-certificate.md b/content/en/post/2025-07-01-issuing-our-first-ip-address-certificate.md
@@ -4,7 +4,7 @@ date: 2025-07-01T00:00:00Z
 slug: issuing-our-first-ip-address-certificate
 title: "We've Issued Our First IP Address Certificate"
 excerpt: "Let's Encrypt now has the ability to issue certificates for both domain names and IP addresses."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-08-06-ocsp-service-has-reached-end-of-life.md b/content/en/post/2025-08-06-ocsp-service-has-reached-end-of-life.md
@@ -4,7 +4,7 @@ date: 2025-08-06T00:00:00Z
 slug: ocsp-service-has-reached-end-of-life
 title: "OCSP Service Has Reached End of Life"
 excerpt: "Today we turned off our Online Certificate Status Protocol (OCSP) service."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-08-14-rfc-6962-logs-eol.md b/content/en/post/2025-08-14-rfc-6962-logs-eol.md
@@ -4,7 +4,7 @@ date: 2025-08-14T00:00:00Z
 slug: rfc-6962-logs-eol
 title: "End of Life Plan for RFC 6962 Certificate Transparency Logs"
 excerpt: "Our RFC 6962 CT logs will go read-only on November 30, 2025, and shut down entirely on February 28, 2026. Going forward we will use Static CT API logs instead."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-09-11-native-acme-for-nginx.md b/content/en/post/2025-09-11-native-acme-for-nginx.md
@@ -4,7 +4,7 @@ date: 2025-09-11T00:00:00Z
 slug: native-acme-for-nginx
 title: "Native ACME Support Comes to NGINX"
 excerpt: "The most-used web server and reverse proxy gives users a new certificate option."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 <div class="pull-quote-right">

diff --git a/content/en/post/2025-09-16-ARI-RFC.md b/content/en/post/2025-09-16-ARI-RFC.md
@@ -4,7 +4,7 @@ date: 2025-09-16T00:00:00Z
 slug: ARI-RFC
 title: "ACME Renewal Information (ARI) Published as RFC 9773"
 excerpt: "Our renewal advisory specification was published by the IETF."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-10-07-Ten-yrs-community-forum.md b/content/en/post/2025-10-07-Ten-yrs-community-forum.md
@@ -4,7 +4,7 @@ date: 2025-10-07T00:00:00Z
 slug: Ten-yrs-community-forum
 title: "Ten Years of Community Support"
 excerpt: "In its first decade, the Let's Encrypt Community Forum has helped tens of thousands of users, kept Let's Encrypt staff in touch with the community, and spurred new tools and projects."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-11-24-gen-y-hierarchy.md b/content/en/post/2025-11-24-gen-y-hierarchy.md
@@ -4,7 +4,7 @@ date: 2025-11-24T00:00:00Z
 slug: gen-y-hierarchy
 title: "New \"Generation Y\" Hierarchy of Root and Intermediate Certificates"
 excerpt: "Let's Encrypt is beginning issuance from our new hierarchy of root and intermediate certificates."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-12-02-from-90-to-45.md b/content/en/post/2025-12-02-from-90-to-45.md
@@ -4,7 +4,7 @@ date: 2025-12-02T00:00:00Z
 slug: from-90-to-45
 title: "Decreasing Certificate Lifetimes to 45 Days"
 excerpt: "Improving security for active and revoked certificates."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2025-12-09-10-years.md b/content/en/post/2025-12-09-10-years.md
@@ -4,7 +4,7 @@ date: 2025-12-09T00:00:00Z
 slug: 10-years
 title: "10 Years of Let's Encrypt Certificates"
 excerpt: "Let's Encrypt has been issuing trusted certificates for a decade."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 On September 14, 2015, [our first publicly-trusted certificate](https://crt.sh/?id=9314793) went live. We were proud that we had issued a certificate that a significant majority of clients could accept, and had done it using [automated software](https://github.com/letsencrypt/boulder). Of course, in retrospect this was just the first of billions of certificates. Today, Let's Encrypt is the largest certificate authority in the world in terms of certificates issued, the ACME protocol we helped create and standardize is integrated throughout the server ecosystem, and we've become a household name among system administrators. We're closing in on protecting one billion web sites.

diff --git a/content/en/post/2025-12-29-eoy-letter-2025.md b/content/en/post/2025-12-29-eoy-letter-2025.md
@@ -4,7 +4,7 @@ date: 2025-12-29T00:00:00Z
 slug: eoy-letter-2025
 title: "A Note from our Executive Director"
 excerpt: "A year of growth and progress."
-display_default_footer: true
+display_support_us_footer: true
 ---
 
 <div class="card border-0 pic-quote-right">

diff --git a/content/en/post/2026-01-15-IP-and-6day-general-availability.md b/content/en/post/2026-01-15-IP-and-6day-general-availability.md
@@ -4,7 +4,7 @@ date: 2026-01-15T00:00:00Z
 slug: 6day-and-ip-general-availability
 title: "6-day and IP Address Certificates are Generally Available"
 excerpt: "Short certificates are good for security and now available to all Let's Encrypt subscribers."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2026-02-05-FOSDEM2026.md b/content/en/post/2026-02-05-FOSDEM2026.md
@@ -4,7 +4,7 @@ date: 2026-02-05T00:00:00Z
 slug: FOSDEM2026
 title: 'On the Importance of "Hello" and "Thanks"'
 excerpt: "Our experience at FOSDEM 2026."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2026-02-18-DNS-PERSIST-01.md b/content/en/post/2026-02-18-DNS-PERSIST-01.md
@@ -4,7 +4,7 @@ date: 2026-02-18T00:00:00Z
 slug: DNS-PERSIST-01
 title: "DNS-PERSIST-01: A New Model for DNS-based Challenge Validation"
 excerpt: "A new ACME challenge that uses a persistent DNS authorization record, ideal for IoT, multi-tenant, and batch certificate deployments."
-display_default_footer: true
+display_support_us_footer: true
 display_inline_newsletter_embed: false
 ---
 

diff --git a/content/en/post/2026-02-24-rate-limits-45-day-certs.md b/content/en/post/2026-02-24-rate-limits-45-day-certs.md
@@ -0,0 +1,13 @@
+---
+author: Jacob Hoffman-Andrews
+date: 2026-02-24T00:00:00Z
+slug: rate-limits-45-day-certs
+title: "Shorter Certificate Lifetimes and Rate Limits"
+excerpt: "Rate limits will be unaffected because renewals do not count toward limits."
+display_support_us_footer: true
+display_inline_newsletter_embed: false
+---
+
+As [previously announced](/2025/12/02/from-90-to-45), over the next two years we will be switching the default certificate lifetime from 90 days to 64 days, and then 45 days. This will ultimately double the number of certificate renewal requests each day: today we expect renewal around day 60 (of a 90-day certificate), while in the future we expect renewal around day 30 (of a 45-day certificate). If you use an ACME client that [supports ARI](/2024/04/25/guide-to-integrating-ari-into-existing-acme-clients), this will happen automatically.
+
+The good news for subscribers is that you don't need any changes to your rate limits, whether you are [using our default limits](/docs/rate-limits/) or have requested an override. Our rate limits affect issuance for new domain names (or groups of domain names), but [renewals are exempt](/docs/rate-limits/#limit-exemptions-for-renewals). So, for instance, if you are managing a set of 15,000 certificates that you continually renew, and create 250 new certificates (with new domain names) each day, you will be well within our limits both before and after the transition. The 250 new certificates daily will still be well under our [New Orders per Account limit](/docs/rate-limits/#new-orders-per-account) of 300 per day. And the 15,000 existing certificates will continue to be unaffected by rate limits, whether your ACME client is renewing them every sixty days or every thirty.
diff --git a/i18n/en.toml b/i18n/en.toml
@@ -385,6 +385,24 @@ other = "More recently updated page available in English"
 [post_hero_breadcrumb_blog]
 other = "Blog"
 
+[post_support_heading]
+other = "Support Our Work"
+
+[post_support_body]
+other = "ISRG is a 501(c)(3) nonprofit organization that is 100% supported through the generosity of those who share our vision for ubiquitous, open Internet security. If you'd like to support our work, please consider"
+
+[post_support_link_get_involved]
+other = "getting involved"
+
+[post_support_link_donate]
+other = "donating"
+
+[post_support_body_continued]
+other = "or encouraging your company to"
+
+[post_support_link_sponsor]
+other = "become a sponsor"
+
 [donate_get_involved_button]
 other = "Get Involved"
 

diff --git a/themes/le-2025/assets/css/le-2025-theme-input.css b/themes/le-2025/assets/css/le-2025-theme-input.css
@@ -39,6 +39,9 @@
   }
 }
 
+.support-footer {
+  @apply bg-gray-200 p-6 -mx-4 md:mx-0;
+}
 @utility btn {
   /* Button styles */
   @apply inline-flex items-center justify-center px-4 py-2 rounded-md font-medium transition-colors duration-150 ease-in-out;
@@ -234,6 +237,10 @@
     @apply mt-2 mb-2;
   }
 
+  & p:last-child {
+    @apply mb-0;
+  }
+
   & blockquote {
     @apply pl-4 py-1 my-6 border-l-4 border-gray-300 text-gray-700 italic;
   }
@@ -362,10 +369,10 @@
   @apply narrow-container mx-auto text-left pb-0.5;
 }
 @utility post-hero__breadcrumb {
-  @apply text-sm text-gray-600;
+  @apply text-sm;
 
   & a {
-    @apply hover:text-gray-900 transition-colors;
+    @apply text-white hover:text-gray-300 transition-colors;
   }
 }
 @utility post-hero__title {

diff --git a/themes/le-2025/layouts/_default/single.html b/themes/le-2025/layouts/_default/single.html
@@ -79,4 +79,13 @@
     {{ partial "terms.html" (dict "taxonomy" "tags" "page" $currentPage) }}
   {{ end }}
 
+  {{ if eq $currentPage.Params.display_support_us_footer true }}
+    <div class="narrow-container mx-auto">
+      <div class="support-footer">
+        <h3>{{ i18n "post_support_heading" }}</h3>
+        <p>{{ i18n "post_support_body" }} <a href="https://www.abetterinternet.org/getinvolved/">{{ i18n "post_support_link_get_involved" }}</a>, <a href="/donate/">{{ i18n "post_support_link_donate" }}</a>, {{ i18n "post_support_body_continued" }} <a href="https://www.abetterinternet.org/sponsor/">{{ i18n "post_support_link_sponsor" }}</a>.</p>
+      </div>
+    </div>
+  {{ end }}
+
 {{ end }}