Max TLS server cert validity drops to 47 days by 2029

The CA/Browser Forum decided on April 11, 2025, to gradually reduce the maximum validity of publicly trusted TLS server certificates to 47 days by 2029. Today the maximum validity is 398 days.

Timeline

• 2026-03-15: Certificates will no longer be issued with a validity longer than 200 days.
• 2027-03-15: Certificates will no longer be issued with a validity longer than 100 days.
• 2029-03-15: Certificates will no longer be issued with a validity longer than 47 days.

Read more

• CA/Browser Forum Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods
• Baseline Requirements for TLS Server Certificates