What is the 47 Day Certificate Validity Rule?
Right now, public SSL / TLS certificates max out at 398 days. But in April 2025, Apple’s proposal to reduce this gradually down to 47 days was officially adopted by the CA/B Forum, with all four major browser vendors—Apple, Google, Mozilla, and Microsoft—voting in favor.
This also includes a reduction in the Domain Control Validation (DCV) reuse period, which will drop to just 10 days by March 2029. That means organizations will need to validate domains more frequently tightening the timeline across the entire certificate lifecycle.
Phased Timeline of Validity Reductions
- March 15, 2026: Maximum validity drops to 200 days.
- March 15, 2027: Maximum validity drops to 100 days,
- March 15, 2029: Maximum validity drops to 47 days.
Why the Change?
- Reduced Risk: Shorter lifespans limit the damage window if a certificate or private key is compromised.
- Enhanced Security: Encourages crypto-agility, making systems more adaptable to future threats, including post-quantum cryptography (PQC).
- Operational Necessity: Manual management becomes unsustainable with frequent renewals, pushing organizations toward automated CLM.
Impact on Organization
- Automation is Key: Manual processes cannot keep pace; automation for issuing, deploying, and renewing certificates becomes a prerequisite.
- Visibility & Discovery: Organizations must first find and inventory all their existing certificates.
- Modernized CLM: Requires crypto-agile solutions that can adapt to rapid changes.
For more information please refer to links below:
https://www.digicert.com/blog/tls-certificate-lifetimes-will-officially-reduce-to-47-days
https://www.sectigo.com/47-day-ssl
https://www.globalsign.com/en/blog/navigating-the-47-day-ssl-tls-certificate-validity-era
Get updates on .PH Trends
Join our newsletter and get 10% off on your next domain purchase at dot.ph
Recent Posts
Philippines Value Added Tax (VAT) | Frequently asked questions
Please note: be aware that this article is for informational purposes only and should not be considered as tax advice. For any specific questions, we recommend consulting with your own tax and legal advisors. As part of the Philippine government’s new tax regulations for non-resident digital service providers (DSP), dotPH is now required to collect […]
Read full articleGoogle Workspace Price Update: What You Need to Know
At dotPH, we always strive to provide the best services at the most competitive prices. As a trusted provider of Google Workspace, we have worked hard to keep our pricing stable for as long as possible, even in the face of industry-wide cost increases. However, starting immediately, we will be adjusting our Google Workspace pricing […]
Read full article