{"id":39005,"date":"2026-02-19T08:37:12","date_gmt":"2026-02-19T13:37:12","guid":{"rendered":"https:\/\/www.eginnovations.com\/blog\/?p=39005"},"modified":"2026-02-19T09:54:44","modified_gmt":"2026-02-19T14:54:44","slug":"ssl-tls-certificate-lifetimes-to-reduce-to-47-days","status":"publish","type":"post","link":"https:\/\/www.eginnovations.com\/blog\/ssl-tls-certificate-lifetimes-to-reduce-to-47-days\/","title":{"rendered":"SSL\/TLS Certificate Lifetimes to Reduce to 47 Days"},"content":{"rendered":"
\n

Last year it was widely reported<\/a> that the CA\/Browser Forum had voted to significantly reduce the lifespan of SSL\/TLS certificates<\/a> over the next 4 years, with a final lifespan of just 47 days starting in 2029. The first reduction will come into action in a few weeks, on March 15th 2026, accelerating the need for organizations to automate their monitoring and renewal processes around certificate expiry. The CA\/Browser Forum is a group of certificate authorities (CAs) and software vendors, including major CAs such as DigiCert and GlobalSign, as well as browser vendors such as Google, Apple, Mozilla, and Microsoft.<\/p>\n

SSL\/TLS certificates are digital credentials that secure communication between a client and a server by encrypting data, authenticating the server\u2019s identity, and ensuring data integrity. They enable HTTPS and protect sensitive information such as passwords, personal data, and payment details from interception or tampering. When a user connects to a secure site, the certificate is verified by a trusted Certificate Authority before an encrypted session is established.<\/p>\n

Although commonly called SSL certificates, modern systems use TLS. When certificates expire without renewal, users see a warning on their browser informing them that their connection isn’t private or secure.<\/p>\n

<\/span>Why is the Lifespan of SSL\/TLS Certificates Being Reduced?<\/span><\/h2>\n

The lifespan of SSL\/TLS certificates is being reduced to improve security, reduce risk, and better align with modern, automated IT environments. Shorter-lived certificates limit the damage caused by compromised private keys, mis-issued certificates, or outdated \/ deprecated cryptographic standards, as any exposure window is significantly reduced. In principle the reduction should sets the expectation that organization will automate and should encourage the adoption of automation for certificate issuance, renewal, and rotation, reducing human error and operational risks.<\/p>\n

<\/span>A Tapered Plan for SSL\/TLS Certificate Lifespan Reduction<\/span><\/h2>\n

The reduction to a 47-day maximum lifetime for certificates will be phased in over the next few years according to a schedule of:<\/p>\n