March 15, 2026, SSL certificate life is reduced again — we can help

The CA/Browser Forum has approved a plan to gradually reduce the maximum validity period of SSL/TLS certificates. Questo decisione, che è supportato da gli browser principali includono Chrome, Safari e Firefox, migliorare la rispettività e sicurezza del global Web Public Key Infrastructure (Web PKI).

Significant changes

‍TimeChangesTodayThe maximum certificate life is limited to <398 days.Recycling OV/EV enterprise validation <825 days.March 15, 2026La vida del certificado máximo se redução para <200 días.Recycling of OV/EV enterprise validations <398 days.March 15, 2027Validity period is further reduced to <100 days.March 15, 2029Validity period is definitively reduced to <47 days.

Domain Validation Recycling

La validazione di dominio può essere utilizzato per prodotti che supporta per la massima Lifetime del certificato, quindi un certificato di 100 giorni deve essere validato di dominio con DNS, E-mail, o URL almeno ogni 100 giorni.

Why these changes are important

One of the reasons for reducing the service life is the desire to be able to change or correct more quickly when new vulnerabilities or bugs arise. Reduced validity periods reduce the risk of misuse of certificates. Certificates viene snapshots de dados validados en un punto specifico en tempo, y más de vida correttamente minimizar la possibilidad que certificados compromisados pode ser exploitado.

Preparing for the transition

When the certificate life is reduced in 2026, it will be necessary to reissue the certificate and install it several times a year, even if it is purchased for, for example, 1 year. We recommend starting to set up the automation now, before the sudden rush.

Our SSL Automation Services

At FairSSL, we offer our own developed Auto DNS validation and ACME service, which allows you to automate domain authentication and certificate installation on both Windows, macOS and Linux-based systems. These solutions enable the use of both domain-validated and enterprise-validated certificates and are available to all customers, regardless of whether one has one certificate or 100. It is possible to set it up yourself or use our installation service, where we set up the automation at a fixed price.

We are happy to advise you on how best to prepare.

Last updated 19. Abril 2025

‍