Overview of SSL Lifespan Changes
Publicly trusted SSL/TLS certificates (the ones browsers recognize) are moving to much shorter maximum validity periods.
Currently, most certificates are valid for up to 398 days (about 13 months). This will be reduced in stages over the next few years.
Phased Reduction Schedule
- March 15, 2026 – Maximum validity reduced to 200 days (about 6.5 months).
- March 15, 2027 – Maximum validity reduced to 100 days (about 3.3 months).
- March 15, 2029 – Maximum validity reduced to 47 days (just over 1.5 months).
By 2029, any new publicly trusted certificate will expire after 47 days at most.
Reasons for the Change
- Security improvements
Shorter certificate lifespans reduce the risk from compromised keys or outdated certificates, limiting potential damage. - Faster cryptography updates
Short-lived certificates make it easier to phase out weak algorithms and adopt stronger cryptography. - Reduced reliance on revocation mechanisms
Traditional revocation methods (like CRLs or OCSP) are unreliable. Certificates that expire quickly reduce this dependency. - Encouragement of automation
With certificates expiring so frequently, automated management is necessary, making manual renewals impractical.
Implications for Users and Administrators
- Frequent renewals: Certificates will need to be renewed roughly every month by 2029 if they remain in use.
- Automation required: Manual renewals will be nearly impossible at scale. ACME clients or automated systems will be essential.
- Validation checks: Domain ownership verification will occur more often, as the period during which validations can be reused shrinks significantly.
Summary Table
| Year | Maximum Certificate Validity |
|---|---|
| Today | ~398 days (13 months) |
| 2026 | 200 days (6.5 months) |
| 2027 | 100 days (3.3 months) |
| 2029 | 47 days (1.5 months) |
Bottom line: By 2029, all new publicly trusted SSL/TLS certificates will expire after 47 days, making automation essential and significantly increasing the frequency of renewals compared to today.