3-year Certificates Are Being Phased out - May 4th, 2017
Dear <<First Name>>,
We at getSSL by iWebz wanted to give you a heads-up about the phasing out of 3-year TLS/SSL certificate validity.
Recently the CAB Forum – the industry’s de facto regulatory body, consisting of Certificate Authorities and Web Browsers – voted to adopt Ballot 193. This means some major changes are coming.
Perhaps most disruptively, there will no longer be three-year SSL certificates. Effective March 1, 2018, the new maximum validity will be 27 months (two years + up to three months that can be carried over when you renew early).
So how does this affect you?
The simple takeaway:
Effective March 1st, 2018 all new SSL certificates will be restricted to a maximum of 825 days (2 years + 3 months renewal buffer). This also affects existing DV (Domain Validation) certificates. Prior to this date, CAs are allowed to issue 3-year certificates. Note that some may choose to discontinue these practices early.
Shorter-term certificates (1 & 2 years) are not affected by either of these changes.
If you have already purchased any certificate with 3-year validity with an expiry date after 1st April 2018, avoid re-issuing the certificates after Feb 2018. If you do so your certificate will be truncated to 825 days validity and you will lose the difference permanently.
To make all of this easier to understand, we have created some scenarios and a description of how these new changes will affect you. More than one of these may (or could) affect you.
To know more please visit the article on 3-year certificate validity phase out on the iWebz℠ blog:
https://www.iwebz.net/index.php/3-year-ssl-certificate-validity-phase-out/
Best Regards,
Team iWebz
iWebz℠ - powered by the web - iwebz.host
|
