News from the SSL certificate and internet security industry

19Sep 2026 by dradmin No Comments

SSL Certificate Validity Is Getting Shorter: 200 Days Today, 47 Days by 2029

SSL

The SSL/TLS industry is undergoing one of the most important changes in certificate management in recent years. The maximum validity period of publicly trusted SSL/TLS certificates has been reduced from 398 days to approximately 200 days — and this is only the first step. Over the next few years, certificate lifetimes will become progressively shorter, eventually reaching just 47 days in 2029. For website owners and system administrators, this means one thing above all: SSL certificate management will need to become much more frequent. And as certificate lifetimes continue to shrink, SSL automation will move from being a convenient feature to becoming an essential part of certificate management. SSL Certificate Validity: What Is Changing? The CA/Browser Forum has approved a gradual reduction in the maximum validity period allowed for publicly…

05Sep 2026 by dradmin No Comments

CAA Records Made Easier: Updated Guide and New Free CAA Generator

SSL

CAA records are a simple but useful way to improve control over SSL/TLS certificate issuance for your domains. They allow you to specify which Certificate Authorities are authorised to issue certificates, including wildcard certificates, for a domain. We've just updated our complete guide to CAA records with more detailed information, practical examples and step-by-step instructions for configuring CAA records in your DNS. The updated guide explains how the issue, issuewild and iodef properties work, how to authorise multiple Certificate Authorities, how CAA policies apply to subdomains, and how to check that your records have been published correctly. Introducing the euroSSL CAA Record Generator Along with the updated guide, we've also released a new free tool: the euroSSL CAA Record Generator. Instead of building CAA records manually, simply enter your domain…

08Jan 2026 by dradmin No Comments

SSL Certificate Validity Reduced to 199 Days: What You Need to Know

Security, SSL

Starting February 24, 2026, all Certification Authorities (CAs) will begin issuing TLS/SSL certificates with a maximum validity of 199 days, down from the current 397 days. This is not a vendor-specific decision, but an industry-wide requirement mandated by the updated Baseline Requirements of the CA/Browser Forum. The primary objective is to strengthen overall internet security by reducing the exposure window of compromised certificates and enabling faster adoption of new cryptographic standards as threats evolve. Why Certificate Lifetimes Are Getting Shorter Shorter certificate validity periods bring several security and operational advantages: Reduced risk in case of private key compromise Faster response to vulnerabilities and cryptographic deprecations Improved alignment with modern automation-driven certificate management This change follows the same security-first approach that previously led to the reduction from multi-year certificates to one-year…

30Dec 2025 by dradmin 1 Comment

Sectigo Notice: Legacy Chain Re-Issuance Will End After December 31, 2025

Security, SSL

Sectigo has announced an important change affecting the re-issuance of SSL/TLS certificates. Beginning January 1, 2026, Sectigo will no longer support the re-issuance of certificates using legacy (older) trust chains. All reissued certificates will instead be issued only under current, modern chains. Who Is Affected? This change primarily affects Microsoft server environments where some end-users are still using outdated operating systems or devices. In rare cases, these legacy systems do not trust Sectigo’s newer root certificates, which can cause trust warnings or connection failures. Previously, administrators could work around this issue by re-issuing the certificate with an older, cross-signed chain. However, Microsoft systems may not always honour this workaround — particularly when a shorter, but untrusted, chain path exists. In these environments, the client may ignore the cross-signed chain and…

14Jun 2025 by dradmin 1 Comment

Chrome Will Drop Client Authentication Support in New SSL Certificates by June 15, 2026

Security, SSL

What’s Changing? Google is updating its Chrome Root Store Policy (v1.6) so that publicly‑trusted SSL/TLS certificates issued on or after June 15, 2026, can only include the serverAuth extended key usage (EKU). Certificates that also include clientAuth (used for client authentication in mutual TLS) will no longer be trusted by Chrome Key Dates to Know DateRequirementJune 15, 2025Chrome Root Store stops accepting new intermediate CAs that combine serverAuth + clientAuth .Sept 15, 2025Recommended deadline for CAs to shift to dedicated server-auth PKI hierarchies .June 15, 2026All new public SSL certs must include only serverAuth; legacy certs remain valid until they expire . Why This Matters Browser Security & Trust: Separating server and client authentication in certificate chains enhances trust and reduces security risks CA Industry Alignment: Major CAs like DigiCert,…

16Jul 2024 by dradmin No Comments

DCV Troubleshooting Tips for Quick and Successful SSL Certificate Release

Security, SSL

Streamlining the Domain Validation Processes for Efficiency Navigating the domain validation process during an SSL certificate enrollment can be challenging due to unexpected obstacles. This comprehensive guide offers effective troubleshooting strategies to ensure a seamless and efficient validation process. Whether facing email verification issues or DNS configuration problems, these tips will help you overcome common snags and streamline your domain validation efforts. Possible Email Issues WHOISThe Certification Authority may use for DCV the email address reported in whois for the domain that will be covered by the requested SSL certificate.If the WHOIS record is private or has a masked email, it will be not easy to trace where a DCV email has been sent.Depending on the host, users may be able to forward masked WHOIS emails to a real inbox.…

03Oct 2023 by dradmin No Comments

DigiCert Sales of 4, 5, and 6-year Multi-year SSL Certificates Plans end October 31, 2023

SSL

As of October 31, 2023, DigiCert will discontinue offering 4, 5, and 6-year plans for TLS and VMC certificates. However, 1, 2, and 3-year plans will still be available for your convenience. This change applies to all certificates under the DigiCert brand, as well as those managed by DigiCert subsidiaries such as RapidSSL, GeoTrust, and Thawte. Starting October 31, you can only purchase or request 1, 2, and 3-year Multi-year Plans for DigiCert TLS and VMC certificates. Rest assured, existing certificates with 4-6-year Multi-year Plans will continue to receive support. To avoid any confusion or potential cancellations, please note that euroSSL.eu will stop selling 4, 5, and 6-year DigiCert certificates on October 25. However, please be aware that this change does not impact Sectigo and Comodo SSL certificates. 4, 5,…

10Aug 2023 by dradmin No Comments

Obtaining an SSL Certificate for an IP Address: All You Need to Know

SSL

Can you secure a website with an SSL certificate using an IP address? The answer is a resounding 'Yes!'It is indeed possible to obtain an SSL certificate for a public IP address, opening up new possibilities for your online security. Below, we outline the key guidelines and prerequisites for acquiring an SSL certificate for an IP address: SSL Certification is available for Public IP Addresses onlyRest assured, SSL certificates are available only for public IP addresses. This offers a flexible way to enhance your online security while broadening your digital horizons. Control of the IP AddressTo qualify, your organization must have control over the specific IP address in question. Demonstrating your command over the IP address is vital to the validation process. Verification through File AuthenticationThe Certification Authority (CA) will…

06Aug 2023 by dradmin No Comments

Unraveling the Evolution of SSL Certificates: From Exclusive Green Bar to Enhanced Trust

SSL

In the rapidly evolving world of online security, the SSL certificate green bar was once a coveted symbol of prestige, exclusively reserved for Extended Validation (EV) certificates. This prominent green bar, proudly displayed next to the URL, provided instant assurance to users about the authenticity of a website. However, with the continuous progress in HTTPS adoption and industry advancements, the fate of the green bar eventually changed, compelling decision-makers to reconsider its significance. This insightful article delves deep into the reasons behind the green bar's eventual removal and explores the intriguing question of whether it will ever make a comeback. Additionally, we will uncover the enduring popularity of EV SSL certificates and explore potential changes that may impact them in the foreseeable future. A Trustworthy Visual Cue for Website Visitors…

11Dec 2022 by dradmin No Comments

The Facts About Free SSL

SSL

What You Need to Know to Make Sure It’s a Good Fit When it comes to protecting your reputation and gaining trust online—investing in the right SSL Certificate is worth every penny. Starting in 2016, free SSL certificates became available and they’ve been a positive force in moving us closer to a fully encrypted web. Unfortunately, they’ve also made it easy for cybercriminals to look legit, so you might have to look at premium options to stand out from these web menaces. Given the huge rise in phishing attacks, your visitors can no longer depend solely on the padlock and “Secure’ designation in the address bar as clear indicators that your site is truly secure and you’re legitimate. Here are some important things to be aware of so you can…