SSL certificate validity drops to 100 days in March 2027

From 15 March 2027, public TLS certificates issued under CA/B Forum Baseline Requirements will be valid for no more than 100 days, falling to 47 days in 2029. Let's Encrypt will issue 64-day certificates by default starting 10 February 2027.

• From 15 March 2027 the maximum certificate lifetime drops from 200 to 100 days
• Let's Encrypt will issue 64-day certificates from 10 February 2027
• The limit falls to 47 days on 15 March 2029
• From 2028 CA/B Forum rules will ban email validation to admin@ and webmaster@ addresses