New Global SSL/TLS Policy (2026–2029)

New Global SSL/TLS Policy (2026–2029)

Core change: SSL certificates will become short‑lived, and validation must be repeated more frequently.

1. Certificate Validity Timeline (Official CA/B Forum Schedule)

• Until March 15, 2026: Max validity = 398 days

• From March 15, 2026: Max validity = 200 days

• From March 15, 2027: Max validity = 100 days

• From March 15, 2029: Max validity = 47 days (final target)

This is the global rule for all publicly trusted SSL/TLS certificates (DV, OV, EV).

2. Domain Validation (DCV) Re‑Use Limits

Validation data cannot be reused for long periods anymore.

• Until March 15, 2026: Reuse allowed for 398 days

• From March 15, 2026: Reuse allowed for 200 days

• From March 15, 2027: Reuse allowed for 100 days

• From March 15, 2029: Reuse allowed for 10 days (very strict)

This means frequent re-validation is mandatory.

3. Identity (OV/EV) Validation Re‑Use

• SII (Subject Identity Information) reuse drops from 825 days to 398 days starting March 15, 2026.

4. Why This Policy Exists

• Reduce exposure if a private key is compromised

• Reduce reliance on broken revocation systems (OCSP/CRL)

• Force automation and modern PKI practices