Announcements

Product updates, new features, maintenance notices and service status, all in one place.

New Global SSL/TLS Policy (2026–2029)

Published 5 June 2026 1 min read

New Global SSL/TLS Policy (2026–2029)

Core change: SSL certificates will become short‑lived, and validation must be repeated more frequently.

1. Certificate Validity Timeline (Official CA/B Forum Schedule)

Until March 15, 2026: Max validity = 398 days
From March 15, 2026: Max validity = 200 days
From March 15, 2027: Max validity = 100 days
From March 15, 2029: Max validity = 47 days (final target)

This is the global rule for all publicly trusted SSL/TLS certificates (DV, OV, EV).

2. Domain Validation (DCV) Re‑Use Limits

Validation data cannot be reused for long periods anymore.

Until March 15, 2026: Reuse allowed for 398 days
From March 15, 2026: Reuse allowed for 200 days
From March 15, 2027: Reuse allowed for 100 days
From March 15, 2029: Reuse allowed for 10 days (very strict)

This means frequent re-validation is mandatory.

3. Identity (OV/EV) Validation Re‑Use

SII (Subject Identity Information) reuse drops from 825 days to 398 days starting March 15, 2026.

4. Why This Policy Exists

Reduce exposure if a private key is compromised
Reduce reliance on broken revocation systems (OCSP/CRL)
Force automation and modern PKI practices