USD 
GBP 
CAD 
INR 
AUD 
SGD 
The lifecycle of SSL/TLS certificates is entering a new phase. Certificate Authorities (CAs) across the industry are beginning to shorten certificate lifespans as part of a broader shift toward stronger security practices and more frequent key rotation.
Recent announcements from major Certificate Authorities signal the beginning of this transition. The first phase involves reducing certificate validity to around 200 days, with further reductions expected over the coming years as the industry moves toward much shorter lifecycles.
This article provides an official update on Certificate Authority announcements related to SSL/TLS certificate validity changes. It serves as a central reference for tracking CA-specific updates as they are introduced across the ecosystem.
Industry Direction: Gradual Reduction of TLS Certificate Validity
The CA/Browser Forum has introduced a roadmap for reducing TLS certificate lifetimes. The goal is to reduce long-term exposure from compromised keys, outdated validation data, or misconfigurations that remain undetected for extended periods.
The approved timeline gradually lowers the maximum allowed validity:
| Timeline | Maximum TLS Certificate Validity |
|---|---|
| Current standard | Up to 398 days |
| 2026 transition | Around 200 days |
| 2027 transition | Around 100 days |
| By 2029 | 47 days |
These changes affect public SSL/TLS certificates used for websites and other internet-facing services.
While the policy establishes the maximum allowed validity, individual Certificate Authorities implement these changes according to their own release schedules.
TLS Certificate Validity Changes by Certificate Authority
The following sections summarize announced changes from Certificate Authorities regarding TLS certificate validity limits.
This section will be updated as additional providers introduce new policies.
DigiCert: Transition to 199-Day TLS Certificate Validity
DigiCert has implemented one of the first updates aligned with the new industry schedule.
Beginning February 24, 2026, DigiCert stopped accepting requests for public TLS certificates with validity longer than 199 days.
This limit applies to all newly issued public TLS certificates, including:
- Domain Validation (DV)
- Organization Validation (OV)
- Extended Validation (EV)
Certificates issued after this date cannot exceed the new maximum validity period. It is important to note that certificate validity is determined by the issuance date, not the purchase date.
If validation steps are completed after the deadline, the certificate will automatically follow the 199-day validity limit.
The change aligns DigiCert’s issuance policies with the CA/Browser Forum roadmap for reducing certificate lifetimes.
What This Means for SSL Certificate Orders
Starting February 24, 2026, DigiCert certificates will be issued with a maximum validity of 199 days.
For customers purchasing DigiCert SSL certificates through SSL2BUY, this means:
- Newly issued DigiCert certificates will follow the 199-day validity limit
- Existing certificates will remain valid until their expiration date
- Renewals and replacements will follow the new lifecycle once the change takes effect
The change does not affect how SSL certificates secure websites or encrypt connections. It only affects how long a certificate remains valid before renewal is required.
What Organizations Should Expect
Although certificate validity periods are becoming shorter, the way SSL/TLS certificates secure websites and applications remains the same.
The primary operational change is that certificates will need to be renewed more frequently.
Organizations managing multiple certificates should ensure they maintain visibility over certificate expiration dates and renewal schedules to avoid unexpected service interruptions.
As certificate lifecycles continue to evolve, effective certificate management will become increasingly important for maintaining uninterrupted HTTPS security.
Staying Updated on TLS Certificate Policy Changes
The TLS ecosystem continues to evolve as Certificate Authorities and browser vendors refine security standards.
Tracking policy changes from major Certificate Authorities helps organizations plan certificate renewals, adjust management processes, and maintain uninterrupted website security.
This article will continue to be updated as new TLS certificate validity policies are announced across the industry.
Related Article:
