Deprecation timeline

This page shows

4.0.0 (Q1 2027)

Support for Python 3.11 will be dropped.
The defaults for CA_DEFAULT_EXPIRES and CA_ACME_MAX_CERT_VALIDITY will be reduced to 47 days (announced with 3.0.0).

3.3.0 (Q4 2026)

The --days parameter for the notify_expiring_certs management command will be removed (deprecated since 3.1.0).

3.2.0 (Q3 2026)

The cache_crls management command will be removed, used generate_crls instead (deprecated since 3.0.0).
The regenerate_ocsp_keys management command will be removed, use generate_ocsp_keys instead (deprecated since 3.0.0).

3.1.0 (Q2 2026)

Support for using an int for expires in OCSPView will be removed (deprecated since 3.0.0).
The cache_crl celery task will be removed, used generate_crl instead (deprecated since 3.0.0).
The cache_crls celery task will be removed, used generate_crls instead (deprecated since 3.0.0).