Let's Encrypt launches free SSL/TLS certificates for IP addresses

Let's Encrypt has issued its first SSL/TLS certificate for IP addresses, marking a new capability for the non-profit certificate authority. This functionality is being gradually rolled out and will soon be available to a wider group of subscribers. While most current users can continue with domain name certificates and may not require IP address certificates, those who do can access them immediately through the staging environment.

Looking forward, IP address certificates are planned to become generally available in production later in 2025. This timeline coincides with the broader introduction of short-lived certificates, which will also become widely available at that time. Many Let's Encrypt client applications already support requesting certificates for IP addresses, though minor technical updates may be required for some client software.

Importantly, any certificates covering IP addresses must be short-lived, with validity periods of only about six days. Clients requesting these certificates must be configured to use the shortlived profile and support the draft Automated Certificate Management Environment (ACME) Profiles specification. This ensures that only up-to-date software will be able to fully take advantage of the new IP-based certificate functionality.