Overview
To maintain the highest security standards across the internet, global web standards are changing how digital security certificates (SSL/TLS) are managed. The maximum lifespan of these certificates is being systematically shortened.
This is a mandatory industry-wide shift designed to better protect website data and user privacy worldwide.
What is Changing?
Historically, security certificates could be issued for multiple years at a time. To combat evolving cyber threats, the maximum validity period for any public security certificate is being progressively reduced on a strict schedule:
-
Current Limit: Maximum certificate validity is capped at 200 days.
-
Upcoming Milestone (March 15, 2027): Maximum validity will drop to 100 days.
-
Future Milestone (March 15, 2029): Maximum validity will drop to 47 days.
Why is This Change Happening?
Shortening the lifespan of security certificates vastly improves internet security for everyone:
-
Minimizes Vulnerability Windows: If a certificate or security key is ever compromised, it will automatically expire and become useless much faster.
-
Frequent Ownership Verification: Websites must prove they own and control their domains more frequently, making it significantly harder for malicious actors to impersonate legitimate businesses.
-
Up-to-date Encryption: Shorter lifespans ensure that websites quickly adopt the latest, strongest cryptographic security standards.
How to Extend Your Certificate to Match Your 1-Year Order
To maintain continuous security protection and use the full 365 days of your order, you must refresh the certificate before the first 200 days lapse. Please follow these steps:
-
Log into the client area approximately 30 days before your current certificate expires.
-
Navigate to the SSL certificate service and click Reissue Certificate.
-
Complete the quick domain validation check.
-
Download the newly extended certificate file and install it on the server to cover the remaining days of your annual term.
Frequently Asked Questions
Will this change affect my current, active certificate?
No. Existing certificates will remain valid until their current expiration date. The new rules only apply to certificates issued or renewed after each respective industry milestone date.
No. Existing certificates will remain valid until their current expiration date. The new rules only apply to certificates issued or renewed after each respective industry milestone date.
Does a shorter lifespan cost more?
No. This change alters how frequently a certificate must be replaced, not the underlying cost of your security coverage.
No. This change alters how frequently a certificate must be replaced, not the underlying cost of your security coverage.
What happens if a certificate isn't updated in time?
If a certificate expires before it is renewed, web browsers (like Chrome, Safari, and Edge) will display a prominent security warning to your visitors, which may block access to your site.
If a certificate expires before it is renewed, web browsers (like Chrome, Safari, and Edge) will display a prominent security warning to your visitors, which may block access to your site.
If you have questions about how your specific account is affected or need help, please contact our support team.
