SSLWatchSSL certificate validity is dropping to 47 days: timeline & what to do
The CA/Browser Forum is cutting maximum SSL/TLS certificate lifetimes from 398 days to 47 days by 2029. Here is the schedule and how to prepare.
In 2025 the CA/Browser Forum approved a phased reduction of the maximum lifetime of public TLS certificates.
| From | Maximum validity |
|---|---|
| March 15, 2026 | 200 days |
| March 15, 2027 | 100 days |
| March 15, 2029 | 47 days |
What it means
Manual yearly renewals stop being practical. Domain validation reuse periods shrink too, so you will revalidate domains more often.
How to prepare
- Automate issuance with ACME (certbot, acme.sh, simple-acme/win-acme, Caddy, cloud load balancers).
- Inventory every certificate – use our bulk checker to list expiry dates for up to 20 domains.
- Add a monitoring safety net: calendar reminders or alerts 14 days before expiry.