Let's Encrypt's May 2026 profile rollout left classic certificates at 90 days, but made ACME profile choice, challenge paths, hooks, and monitoring harder to ignore.
A practical TLS checklist for Linux mail servers: separate public SMTP from authenticated submission, configure Postfix and Dovecot, renew certs, and align DNS.