SSL/TLS Certificate Validity to Be Reduced to 47 Days by 2029
1. What has the CA/Browser Forum changed?
2. How does this affect the SSL certificate owner?
3.How does LeaderSSL simplify the SSL certificate ordering process?
1. What has the CA/Browser Forum changed?
The CA/Browser Forum, which sets industry standards for digital certificates, has announced a gradual reduction in SSL/TLS certificate validity. By March 2029, certificate validity will be gradually reduced to just 47 days.
Apple initiated the proposal, which was backed by major IT companies and certification authorities. Proponents argue that shorter validity periods will improve Internet security by ensuring more frequent validation and reducing the risk of outdated encryption. Currently, SSL/TLS certificates are limited to 398 days. Forum experts argue that encryption standards can become outdated over such long periods, weakening security.
Apple’s proposal also aims to encourage organizations to adopt automated certificate management for issuance and renewal. Without automation, companies may find themselves burdened with frequent manual updates. This shift could be particularly challenging for businesses relying on legacy systems.
2. How does this affect the SSL certificate owner?
Here is the planned timeline for certificate validity changes:
- No change for certificates issued before 15 March 2026;
- Certificates issued after 15 March 2026: validity reduced to 200 days;
- Certificates issued after 15 March 2027: validity reduced to 100 days;
- Certificates issued after 15 March 2029: validity reduced to 47 days.
3. How does LeaderSSL simplify the SSL certificate ordering process?
We’re actively developing a fast and reliable solution for automated certificate renewal using the Automated Certificate Management Environment (ACME) protocol. This protocol enables fully automated issuance and renewal of SSL/TLS certificates by validating domain ownership without manual steps. We will notify you once the ACME protocol is ready for use.
If you have any questions or need assistance to issue, re-issue, or renew your certificate, you can contact our support chat on our website leaderssl.com or contact us at info@leaderssl.com.