The SSL/TLS industry is introducing new security rules that gradually reduce the maximum validity period of SSL certificates.
These rules are defined by the CA/Browser Forum, the organization that establishes the security standards used by browsers and certificate authorities.
These changes affect all public SSL certificates issued by the brands we offer:
|
Date |
Maximum certificate validity |
|---|---|
| Until March 11, 2026 | 398 days |
| From March 12, 2026 | 200 days |
| From March 12, 2027 | 100 days |
| From March 12, 2029 | 47 days |
These changes aim to improve overall Internet security by encouraging more frequent certificate renewal.
SSL certificates will continue to be purchased for a period of 1 year.
The duration of your SSL subscription does not change.
Only the technical validity period of the certificate is limited by the new security rules.
Starting March 12, 2026, an SSL certificate can no longer be issued for the entire year at once. The maximum validity of a certificate will be limited to 200 days.
Before the certificate expires (no later than 200 days after issuance), you will need to reissue your certificate in order to cover the remaining period of your subscription.
Reissuing an SSL certificate is free, does not affect the duration of your subscription, and can be done directly from your client area in the SSL certificate management page.
We recommend reissuing your certificate a few days before its expiration to avoid any service interruption.
Your SSL protection remains active for the entire duration of your subscription, but the certificate itself may need to be replaced during that period.
When an SSL certificate is issued for the first time, domain control validation is always required. This process confirms that you are authorized to use the domain for which the certificate is requested.
This validation remains valid for a maximum of 200 days.
When a certificate is reissued, if the domain validation was completed less than 200 days earlier, it can be reused and no additional validation will be required.
When an SSL certificate is issued for the first time, domain control validation is always required. This process confirms that you are authorized to use the domain for which the certificate is requested.
If the previous validation was performed more than 199 days earlier, you may need to complete the domain validation again (via DNS, HTTP file, or email).
Need help ?