SSL certificate orders reduced to a maximum term of 2 years

23.01.2018

The CA/Browser Forum has approved Ballot 193 which reduces the maximum validity period (or "lifetime") of Domain Validated (DV) and Organization Validated (OV) SSL/TLS certificates from 39 months to 27 months (825 days). This is an industry-wide abolition of certificates with a term of three years that must be implemented by all Certificate Authorities.

Thus, as of February 20, 2018, it will no longer be possible to order DV or OV SSL certificates with a term of three years.

If you currently have a certificate that is valid for three years or more, it should continue to work as usual for the rest of the certificate's term and no action is required.

The following certificates are affected:

• Symantec SSL Certificates
• Symantec Secure Site (OV)
• Symantec Secure Site Pro (OV)
• Thawte SSL Certificates
• Thawte SSL123 Certificate (DV)
• Thawte SSL Webserver Certificate (OV)
• Thawte SGC Super-Certs (OV) (deprecated product)
• Thawte SSL Webserver Wildcard Certificate (OV)
• GeoTrust SSL Certificates
• GeoTrust QuickSSL Premium (DV)
• GeoTrust True BusinessID (OV)
• GeoTrust True BusinessID Wildcard (OV)
• RapidSSL
• RapidSSL Certificate (DV)
• RapidSSL Wildcard Certificate (DV)
• Comodo SSL Certificates
• Comodo Instant SSL (OV)
• Comodo Premium SSL (OV)
• Comodo SGC Wildcard SSL (OV) (deprecated product)
• Comodo Positive SSL (DV)
• Comodo Positive SSL Wildcard (DV)