Added

• Allow a user to modify the configuration of a certificate without renewing it using the new reconfigure subcommand. See certbot help reconfigure for details.
• certbot show_account now displays the ACME Account Thumbprint.

Changed

• Certbot will no longer save previous CSRs and certificate private keys to /etc/letsencrypt/csr and /etc/letsencrypt/keys, respectively. These directories may be safely deleted.
• Certbot will now only keep the current and 5 previous certificates in the /etc/letsencrypt/archive directory for each certificate lineage. Any prior certificates will be automatically deleted upon renewal. This number may be further lowered in future releases.
  • As always, users should only reference the certificate files within /etc/letsencrypt/live and never use /etc/letsencrypt/archive directly. See Where are my certificates? in the Certbot User Guide.
• certbot.configuration.NamespaceConfig.key_dir and .csr_dir are now deprecated.
• All Certbot components now require pytest to run tests.

Fixed

• Fixed a crash when registering an account with BuyPass' ACME server.
• Fixed a bug where Certbot would crash with AttributeError: can't set attribute on ACME server errors in Python 3.11. See GH #9539.

More details about these changes can be found on our GitHub repo.