SSL Certificates Validity Period Reduction

Overview

Due to evolving security requirements in the SSL/TLS ecosystem, the way SSL certificates are issued across the industry has changed. Customers may notice that newly issued certificates now show a validity period of approximately 198 days, even when purchasing a 1-year certificate.

This notice explains the reason for this change and how it affects certificate issuance.

Industry Compliance Requirements

The SSL/TLS industry follows security standards defined by the CA/Browser Forum, a consortium of major certificate authorities and browser vendors.

Under current industry rules, certificate authorities must follow stricter validation and issuance policies. As a result, one-year SSL certificates are now issued using a staged issuance model.

This practice is followed globally by all certificate authorities, including Sectigo and other major providers.

For more information about these industry compliance changes, please refer to:
https://www.sectigo.com/dcv-industry-compliance-changes

How 1-Year Certificates Are Issued

When purchasing a 1-year SSL certificate, the certificate will be issued in two stages:

• The first certificate is issued with a validity of approximately 198 days

• Before the first certificate expires, the certificate can be reissued for the remaining validity period

• The combined validity of the two certificates equals the full one-year period purchased

This staged issuance model is an industry-wide security standard and does not reduce the total validity period of your certificate.

Purchase and Validation Process Remains the Same

The purchase and validation process remains unchanged.

Customers can continue to purchase and complete domain validation in the same way as before. The only difference is that the certificate issued after validation will initially have a validity period of approximately 198 days.

When the first certificate approaches expiration, a second certificate can be reissued for the remaining validity period, ensuring the total coverage equals one full year.

Upcoming Feature: Fully Automated SSL Renewal

To further simplify certificate management, we are currently developing a fully automated SSL renewal subscription system.

Once this feature is released:

• Certificates will be automatically reissued before expiration

• No manual action will be required

• The renewal process will be fully seamless

This will allow customers to maintain continuous SSL protection without needing to manually manage certificate reissuance.

Summary

• The 198-day certificate validity is part of an industry-wide standard

• All certificate authorities follow this issuance model

• The purchase and validation process remains unchanged

• Two certificates are issued (198 days + remaining validity) to cover the full one-year period

• An automatic renewal system will be released soon to make the process completely seamless

If you have any questions, please contact our support team.