Not long ago an SSL certificate was bought once a year and forgotten. That is ending: in April 2025 the CA/Browser Forum — the body that sets the rules for certificate authorities and browsers — approved ballot SC-081v3, and the maximum certificate lifetime is being reduced step by step.
The schedule
•before 2025 — 398 days;
•from March 2026 — about 200 days (GoGetSSL currently issues up to 199 days);
•from March 2027 — about 100 days;
•from March 2029 — 47 days.
The period during which a CA may reuse a domain validation is shrinking too: 398 → 200 → 100 → 10 days.
What it means in practice
•Buying for a year or more still makes sense: the paid term stays valid in full, but the certificate itself must be reissued and reinstalled during it.
•Reissuing is free, but it adds manual work — and with it the risk of a mistake or a missed deadline.
•Renewal is now processed as a new order with a repeated domain validation (DNS, a file on the site or an email).
•An expired certificate means a browser warning and lost visitors.
What we do
•We remind you before a certificate expires.
•If your site is hosted with us or on a server rented from us, we pass the domain validation and install the new certificate ourselves: we only need your confirmation.
•If the certificate was bought for a domain with no hosting or server with us, you handle the validation and installation; if you have questions we will tell you what to do.
•We expanded our SSL range: DV, OV and EV, Wildcard, multi-domain and IP-address certificates — see the catalogue.
Source: GoGetSSL — SSL Certificate Lifecycles Are Shortening.
