For years, managing SSL/TLS certificates was a simple annual chore. But the landscape of digital trust is rapidly shifting, making manual tracking a thing of the past.
The CA/Browser Forum is drastically reducing certificate lifespans. All major CA providers have already capped public SSL/TLS validity at 200 days, and by 2029, this will shrink to just 47 days. Automation is now a mandatory requirement to keep organizations secure and online.
The Rapid Countdown
This transition is actively underway:
- March 2026 (Active Now): Lifespans capped at 200 days.
- March 2027: Lifespans drop to 100 days.
- March 2029: The final shift to 47 days, with domain validation reuse reduced to 10 days.
What was once a yearly task is becoming a continuous cycle that humans simply cannot manage manually.
The Hall of Shame: When Manual Renewals Fail
Even when teams had a full year to manage renewals, manual processes created massive chaos. If billion-dollar enterprises struggled with 365-day cycles, 47-day lifespans will be impossible without automation. Consider these major failures:
- Microsoft Teams (2020): A forgotten authentication certificate locked out 20 million users, paralyzing global enterprise communications for hours.
- Ericsson & O2 (2018): An expired certificate knocked tens of millions of UK and Japanese mobile users offline, causing massive financial and reputational damage.
- Spotify (2020): A lapsed wildcard SSL certificate took the global music streaming giant offline, instantly trending #spotifydown worldwide.
- Starlink (2023): Even SpaceX's advanced satellite network suffered a massive global outage simply because a routine ground station certificate expired.