TLS certificate lifetimes will officially reduce to 47 days
The CA/Browser Forum has officially voted to amend the TLS Baseline Requirements to set a schedule for shortening both the lifetime of TLS certificates.
DigiCert is a global leader in digital trust, securing identities, data, and systems at enterprise scale—powered by Intelligent Trust and built for a quantum-safe future.
Visit digicert.com → On Hacker News Feb 2018 – Apr 2025
The CA/Browser Forum has officially voted to amend the TLS Baseline Requirements to set a schedule for shortening both the lifetime of TLS certificates.
DigiCert is electing to withdraw from the CA Security Council (CASC) as we believe CASC is moving in a direction that DigiCert does not support. Read more.
In communications today, Trustico has suggested that the certificate revocation is due to the upcoming Google Chrome distrust of Symantec roots. That is incorrect. DigiCert wants to make it clear that the certificates needed to be revoked because Trustico sent us the private keys; this has nothing to do with future…
DigiCert will be revoking certificates that did not have proper Domain Control Verification (DCV). Before issuing a certificate to a customer, DigiCert validates the customer’s control or ownership over the domain name for which they are requesting a certificate using one of several methods approved by the CA/Browser…