The new 39 months SSL validity period

In the last period of time, the SSL Industry has made some changes to improve the SSL and TLS security implementation over the Internet. To increase SSL Certificates’ security, the rules for their application are reevaluated and updated in time.

According to the Certificate Authority/Browser Forum Guidelines “Baseline Requirements for the Issuance and Management of Publicly - Trusted Certificates, v.1.2.3”, dated October 2014, as it is specified in section 9.4, after 1 April 2015, the Certification Authorities shall not issue certificates with a period of validity longer than 39 months. The Certificate Authority/Browser Forum is the administrative unit of SSL industry which includes Certificate Authorities, Internet Browser and Relying-Party Application Software suppliers.

Therefore, the SSL Certificates already issued remain valid.

Consequently, all issued Certificates from 01 July 2012 must have a Validity Period no longer than 60 months. It is important to note that the 4 and 5 - years active Certificates older than 39 months and have a remained time more than 39 months, will be truncated to the maximum duration of 39 months.

The Certificates issued beyond 1 April 2015 will be valid no greater than 39 months. This means 3 years (36 moths) validity period, plus 3 months to renew your website’s SSL Certificate.

The validity period of Extended Validation SSL Certificates still remains at 27 months.

This restriction is applied for the new delivered SSL Certificates and re-issuer. This requirement is established to enforce the security of Security Sockets Layer and Transport Layer Security and makes the security updates more efficient.

CyberSSL.com distributes SSL certificates of Verisign, Comodo, RapidSSL, Thawte, Geotrust and Symantec brands. Your website deserves the best SSL Certificate! You can buy a suitable SSL Certificate for your web site here!