Upcoming CA/B Forum Changes to SSL Certificate Validity
The CA/Browser (CA/B) Forum has introduced significant updates to SSL/TLS certificate lifecycles. These changes are designed to improve security across the web PKI ecosystem by reducing certificate validity periods and encouraging automation.
This article outlines what is changing, when these changes will take effect, and how they impact your SSL certificate management.
1. What’s Changing: Reduced Certificate Validity Periods
The CA/B Forum has approved a phased reduction in the maximum validity period for publicly trusted SSL/TLS certificates.
Historically, SSL certificates could be issued for up to 398 days. Under the new guidelines, this validity period will be progressively shortened over the coming years to reduce risk exposure and improve cryptographic agility.
Shorter lifespans mean:
Reduced exposure if a certificate or private key is compromised
Faster adoption of updated security standards
Increased reliance on automated certificate lifecycle management
2. Timeline of Validity Changes
The transition will occur in clearly defined phases:
Effective Date Maximum Certificate Validity
Until 15 March 2026 398 days
15 March 2026 200 days
15 March 2027 100 days
15 March 2029 47 days
These changes are part of a CA/B Forum ballot (SC-081v3) passed in 2025, with broad support from major browser vendors and certificate authorities.
The first reduction takes effect on 15 March 2026, when the maximum validity drops from 398 days to 200 days.
3. Impact on 1-Year Domain SSL Certificates
Although industry rules are moving toward shorter validity periods, customers who purchase 1-year Domain SSL certificates will continue to receive uninterrupted coverage.
What this means for you:
Your certificate will still align with the 1-year order term
However, due to CA/B Forum restrictions, it will be issued in shorter validity segments
At the end of each certificate’s validity period, it will be automatically reissued
This process will repeat until the full 1-year order duration has been fulfilled.
