Shorter SSL Lifetime: 199, 99 and 47 Days
Since 15 March 2026 an SSL certificate can be valid for at most 199 days, and from 15 March 2027 the limit becomes 99 days. This means more frequent issuances, but your procurement process stays the same.
Important: You can still purchase SSL for 1 year at a time. Your order covers all technical reissuances required during the period.
1. Industry Reduction Timeline
The CA/Browser Forum has adopted a phased reduction of the maximum lifetime for SSL/TLS certificates (ballot SC-081).
| Date | Max Lifetime | DCV Validity | Renewals per Year |
|---|---|---|---|
| Sep 2020 to March 2026 | 398 days | 398 days | ~1x |
| March 15, 2026 (current) | 199 days | 200 days | ~2x |
| March 15, 2027 | 99 days | 100 days | ~4x |
| March 15, 2029 | 47 days | 10 days | ~8x |
DCV = Domain Control Validation. With a 47-day lifetime, domain ownership must be revalidated more frequently to maintain security.
How to Work with Certificates Going Forward
The order period and price remain the same. What changes is that each individual certificate is issued with a shorter lifetime, so you will need to install new certificates more often. The process depends on which CA you use.
Reissue
You purchase one order period and can reissue certificates an unlimited number of times within it. All reissues are free.
- 1 Purchase the order period (e.g. 1 year)
- 2 Issue and install the first certificate
- 3 When the certificate approaches expiry: reissue it
- 4 Install the new certificate on the server
- 5 Repeat steps 3 and 4 until the order period expires
Our system automatically shows a highlighted "Reissue" icon when it is time to act.
Reissue
You purchase one order period and can reissue certificates an unlimited number of times within it. All reissues are free.
- 1 Purchase the order period (e.g. 1 year)
- 2 Issue and install the first certificate
- 3 When the certificate approaches expiry: reissue it
- 4 Install the new certificate on the server
- 5 Repeat steps 3 and 4 until the order period expires
Our system automatically shows a highlighted "Reissue" icon when it is time to act.
Renewal (renew)
GlobalSign uses a renewal model rather than reissue. Renewals within the paid order period are free.
- 1 Purchase the order period (e.g. 1 year)
- 2 Issue and install the first certificate
- 3 The system shows a "Renew" icon when fewer than 32 days remain on the certificate
- 4 Click renew and install the new certificate
- 5 Repeat steps 3 and 4 until the order period expires
Our system automatically shows a highlighted "Renew" icon when fewer than 32 days remain on the certificate.
What Does This Mean for You?
- Existing Certificates
- Certificates issued before the new limits retain their full validity. If you have a 1-year certificate from January 2026, it remains valid until January 2027. The new rules only apply to new issuances after the effective dates.
- More Frequent Updates
- Since certificates expire faster, they must be installed more often on the server. Your 1-year order covers all these issuances at no extra cost, but the technical handling must occur more frequently.
Order Period vs. Technical Issuances
Even though each certificate is only valid for e.g. 199 or 99 days, you can still purchase certificates with a 1-year order period. You simply reissue new certificates on an ongoing basis within your existing order.
Left side
1-year order period (Financial)
Right side
Technical issuances
1-year order paid
Certificates issued with up to 199-day lifetime.
Certificate (199 d.)
Certificate (199 d.)
1-year order paid
New rules: 99-day lifetime from 15 March 2027.
99 d. cert.
99 d. cert.
99 d. cert.
99 d. cert.
1-year order paid
Still a 99-day lifetime.
99 d. cert.
99 d. cert.
99 d. cert.
99 d. cert.
1-year order paid
New rules: 47-day lifetime.
47 days
47 days
47 days
47 days
47 days
47 days
47 days
47 days
47 days
47 days
47 days
47 days
By reissuing 15-30 days before expiry, you ensure your servers always have a valid certificate without losing paid time from your order period.
Examples: order period vs. certificate lifecycle
See how your order period covers the technical certificate issuances over time. Each coloured bar is one certificate. Hover over the bars for details.
Frequently Asked Questions About the New Lifetimes
Find answers to the most common questions about SSL certificates and FairSSL.
Need Advice?
We help you navigate the new industry requirements and secure your infrastructure.