LOS ANGELES (Jan. 20, 2025) — The Association of Sites…
SSL certificate validity overview
A proposal to reduce SSL/TLS certificate lifespans has been approved by the CA/Browser Forum, setting a new maximum validity of 47 days by March 15, 2029. This change aims to enhance digital security by minimizing the window of exposure for compromised certificates.
Key Timeline for Certificate Validity Reductions
- March 15, 2026: Maximum validity reduced to 200 days.
- March 15, 2027: Further reduction to 100 days.
- March 15, 2029: Final reduction to 47 days.
Additionally, the Domain Control Validation (DCV) reuse period will be limited to 10 days by March 2029.
Implications for MojoHost Customers
Most managed MojoHost customers rely on our managed services to handle SSL certificate renewal. These customers can breathe a sigh of relief – these changes won’t affect their daily operations. Those managed customers who have previously handled their own SSL renewals should consider utilizing the MojoHost support team’s resources as the deadlines approach. For unmanaged customers, this phased reduction will require more frequent certificate renewals, increasing the operational workload for managing SSL/TLS certificates. Manual renewal processes may become impractical, especially for organizations managing multiple domains or services. Luckily, Let’s Encrypt provides free certificates and also helps automate the renewal process.
Recommended Actions
- Implement Automation: Adopt automated certificate management solutions, such as those supporting the ACME protocol, to streamline the renewal process.
- Review Certificate Inventory: Assess all current certificates to plan for timely renewals in line with the new validity periods.
- Stay Informed: Keep abreast of updates from certificate authorities and browser vendors to ensure compliance with evolving standards.
MojoHost is committed to handling SSL renewals on the updated schedule for our managed customers. For those customers handling their own SSL renewal, we are available to assist with this transition by providing guidance on automation tools and best practices for certificate management. For further assistance, please contact our support team.
Related Posts
