SSL Certificate Validity Change
To improve security, the CA/Browser Forum is shortening TLS certificate validity and DCV reuse period to 200 days. To Tackle this, SSL provider has decided to limit the maximum validity of an SSL Certificate to a maximum of 200 days starting March 12,2026.
What happens to SSL certificates Issued Prior of March 12th,2026?
Any SSL certificate issued prior to March 11th,2026is not affected by this change. They’ll remain valid for the entire two-year period and no action is required for these certificates.
What happens to Certificates issued on and after March 12th,2026?
Since SSL Certificates can now have a maximum tenure of 200 days only, if a customer purchases a 2-year SSL Certificate, they will initially be issued a certificate with a validity of 200 days. When this validity is about to expire, you need to re-issue the certificate to extend its validity to another 200 days or the order expiration date （whichever is lower).
Note: Re-issuing a certificate should also be followed by re-installing a certificate.
Example: If a customer purchases 2-year SSL Certificate on March 1st, 2026, and issues the certificate on March 2nd,2026, their certificate will have an expiration date of September 18th, 2026 (200 days after issuance) while their order will have a validity of 2 years with expiration date of March 1, 2028
Will I be sent a reminder to re-issue a certificate at the end of 200 days?
Yes, a reminder will be sent to the registered email address when the validity of the SSL Certificate is about to expire.
Also, the order management page will show a notification about your certificate expiry.
How will the renewal of the 2 year SSL Certificate work now?
The customer can place a renewal request for your 2 year SSL Certificate 30 days prior to your order expiry.
Future Changes:
As approved by the CA/Browser Forum, SSL providers will gradually reduce SSL certificate lifespans to 47 days via a phased rollout.
Additional Reference Links: