{"id":12861,"date":"2026-01-16T10:10:40","date_gmt":"2026-01-16T02:10:40","guid":{"rendered":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/?p=12861"},"modified":"2026-02-18T14:54:38","modified_gmt":"2026-02-18T06:54:38","slug":"tls-ssl-certificate-validity-update-shorter-lifetimes-ahead","status":"publish","type":"post","link":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/ssl\/tls-ssl-certificate-validity-update-shorter-lifetimes-ahead\/","title":{"rendered":"TLS\/SSL Certificate Validity Update: Shorter Lifetimes Ahead"},"content":{"rendered":"<p>The CA\/Browser Forum has officially voted to update the TLS Baseline Requirements, setting a timeline for reducing both the validity period of TLS certificates and the reuse period for CA-validated information. The first changes impacting users will take effect in March 2026.<\/p>\n<p>&nbsp;<\/p>\n<h2>Background of the Ballot<\/h2>\n<p>This decision follows extensive debate within the CA\/Browser Forum, with multiple revisions based on feedback from certificate authorities and their customers. Voting concluded on April 11, 2025, marking the end of a contentious process and allowing the industry to prepare for upcoming changes.<\/p>\n<p>&nbsp;<\/p>\n<h2>New TLS Certificate Validity Timeline<\/h2>\n<p>The new schedule will significantly shorten certificate lifetimes, making automation an essential part of certificate management. Apple introduced the proposal, and although Google had previously advocated for a 90-day maximum, they quickly supported Apple\u2019s plan once voting began.<\/p>\n<h4>Key Dates and Changes:<\/h4>\n<ul>\n<li><strong>Until March 15, 2026:<\/strong>\u00a0Maximum TLS certificate lifetime is 398 days.<\/li>\n<li><strong>From March 15, 2026:<\/strong>\u00a0Maximum lifetime drops to 200 days.<\/li>\n<li><strong>From March 15, 2027:<\/strong>\u00a0Maximum lifetime further reduces to 100 days.<\/li>\n<li><strong>From March 15, 2029:<\/strong>\u00a0Maximum lifetime will be just 47 days.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2>Changes to Validation Information Reuse<\/h2>\n<p>The period for reusing domain and IP address validation information is also being shortened:<\/p>\n<ul>\n<li><strong>Until March 15, 2026:<\/strong>\u00a0Maximum reuse period is 398 days.<\/li>\n<li><strong>From March 15, 2026:<\/strong>\u00a0Drops to 200 days.<\/li>\n<li><strong>From March 15, 2027:<\/strong>\u00a0Reduces to 100 days.<\/li>\n<li><strong>From March 15, 2029:<\/strong>\u00a0Just 10 days.<\/li>\n<\/ul>\n<p>For Subject Identity Information (SII)\u2014details like company name in OV (Organization Validated) or EV (Extended Validation) certificates\u2014the reuse period will be 398 days starting March 15, 2026, down from 825 days. This change does not affect DV (Domain Validated) certificates, which do not include SII.<\/p>\n<p>&nbsp;<\/p>\n<h2>Why 47 Days?<\/h2>\n<p>The 47-day figure may seem arbitrary, but it\u2019s calculated to align with calendar cycles:<\/p>\n<ul>\n<li><strong>200 days:<\/strong>\u00a06 maximal months (184 days) + half of a 30-day month (15 days) + 1 day<\/li>\n<li><strong>100 days:<\/strong>\u00a03 maximal months (92 days) + about a quarter of a 30-day month (7 days) + 1 day<\/li>\n<li><strong>47 days:<\/strong>\u00a01 maximal month (31 days) + half of a 30-day month (15 days) + 1 day<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2>Apple\u2019s Rationale for Shorter Lifetimes<\/h2>\n<p>Apple argues that the CA\/B Forum has signaled the need for automation by consistently shortening certificate lifetimes. The main reason for this change is that certificate information becomes less trustworthy over time, requiring frequent revalidation. Additionally, current revocation systems (like CRLs and OCSP) are unreliable\u2014browsers often ignore them. Shorter lifetimes help mitigate risks from potentially revoked certificates. In 2023, the Forum approved short-lived certificates (valid for up to 7 days) that don\u2019t require CRL or OCSP.<\/p>\n<p>&nbsp;<\/p>\n<h2>Addressing Common Questions and Confusion<\/h2>\n<ul>\n<li><strong>Timeline Gaps:<\/strong>\u00a0The rule changes occur in 2026, 2027, and 2029, with a two-year gap between the latter two updates.<\/li>\n<li><strong>Validation Reuse:<\/strong>\u00a0By 2029, certificates will last 47 days, but validation reuse drops to 10 days. Manual revalidation will be technically possible but highly impractical, risking outages.<\/li>\n<li><strong>Cost Implications:<\/strong>\u00a0Replacement frequency won\u2019t increase costs\u2014pricing remains based on annual subscriptions. Automation typically leads users to voluntarily adopt even shorter replacement cycles.<\/li>\n<\/ul>\n<p>With the move to 100-day certificates in 2027, manual processes will become untenable, accelerating automation adoption well before 2029.<\/p>\n<p>&nbsp;<\/p>\n<h2>Preparing for Automated Certificate Management<\/h2>\n<p>Apple\u2019s push for automation is clear, and <a title=\"IT Solution Singapore\" href=\"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/\">IT Solution Singapore<\/a> is ready to help. Our team offers robust automation solutions for certificate management, including support for ACME protocols and automated renewal processes for DV, OV, and EV certificates.<\/p>\n<p><a title=\"Contact Us Now!\" href=\"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/contact-us\/\">Contact us<\/a> to learn how you can optimise automation for your organisation.<\/p>\n<p>&nbsp;<\/p>\n<h2>Stay Updated on Digital Trust<\/h2>\n<p>For more on certificate management, automation, and TLS\/SSL best practices, subscribe to <a title=\"IT Solution Singapore\u2019s blog\" href=\"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/blog\/\">IT Solution Singapore\u2019s blog<\/a> and never miss an update.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The CA\/Browser Forum has officially voted to update the TLS Baseline Requirements, setting a timeline for reducing both the validity period of TLS certificates and the reuse period for CA-validated information. The first changes impacting users will take effect in March 2026. &nbsp; Background of the Ballot This decision follows extensive debate within the CA\/Browser&hellip;<\/p>\n","protected":false},"author":1,"featured_media":12862,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_title":"TLS\/SSL Certificate Validity Update: Shorter Lifetimes | IT Solution","rank_math_description":"Learn about the CA\/Browser Forum TLS certificate validity update. Shorter lifetimes start March 2026, making automation essential.","rank_math_focus_keyword":"TLS\/SSL Certificate Validity Update","rank_math_canonical_url":"","footnotes":""},"categories":[118,36],"tags":[],"class_list":["post-12861","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ssl","category-news","category-118","category-36","description-off"],"_links":{"self":[{"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/posts\/12861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/comments?post=12861"}],"version-history":[{"count":1,"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/posts\/12861\/revisions"}],"predecessor-version":[{"id":12863,"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/posts\/12861\/revisions\/12863"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/media\/12862"}],"wp:attachment":[{"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/media?parent=12861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/categories?post=12861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/glutenfreepleasure.com\/__proxy_domain\/www.itsolution.com.sg\/wp-json\/wp\/v2\/tags?post=12861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}