What is the 47 Day Certificate Validity Rule?
Right now, public SSL / TLS certificates max out at 398 days. But in April 2025, Apple’s proposal to reduce this gradually down to 47 days was officially adopted by the CA/B Forum, with all four major browser vendors—Apple, Google, Mozilla, and Microsoft—voting in favor.
This also includes a reduction in the Domain Control Validation (DCV) reuse period, which will drop to just 10 days by March 2029. That means organizations will need to validate domains more frequently tightening the timeline across the entire certificate lifecycle.
Phased Timeline of Validity Reductions
- March 12, 2026: Maximum validity drops to 200 days.
- March 15, 2027: Maximum validity drops to 100 days,
- March 15, 2029: Maximum validity drops to 47 days.
Why the Change?
- Reduced Risk: Shorter lifespans limit the damage window if a certificate or private key is compromised.
- Enhanced Security: Encourages crypto-agility, making systems more adaptable to future threats, including post-quantum cryptography (PQC).
- Operational Necessity: Manual management becomes unsustainable with frequent renewals, pushing organizations toward automated CLM.
Impact on Organization
- Automation is Key: Manual processes cannot keep pace; automation for issuing, deploying, and renewing certificates becomes a prerequisite.
- Visibility & Discovery: Organizations must first find and inventory all their existing certificates.
- Modernized CLM: Requires crypto-agile solutions that can adapt to rapid changes.
For more information please refer to links below:
https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days
https://www.sectigo.com/47-day-ssl
https://www.globalsign.com/en/blog/navigating-the-47-day-ssl-tls-certificate-validity-era
Get updates on .PH Trends
Join our newsletter and get 10% off on your next domain purchase at dot.ph
Recent Posts
dotPH Hosting Servers Protected Against Newly Reported PHP Security Flaws
On 21 October 2026, the PHP project reported two serious security flaws in PHP, the software that powers many websites, including WordPress sites. If left unfixed, these flaws could let attackers take control of a web server. dotPH’s web hosting servers are already protected. Our hosting infrastructure providers installed the PHP security updates as soon […]
Read full articleCIEP.ph: Cultivating Culinary Excellence from Eastern Philippines to the World
.PH for Culinary Excellence In the vibrant landscape of the Eastern Philippines, a new standard for culinary education is being set. The Culinary Institute of Eastern Philippines (CIEP) was born out of a critical need: to provide aspiring local chefs with high-quality training that bridges the gap between local heritage and global opportunities. Whether a […]
Read full article
