Public SSL/TLS lifecycle planning
Prepare for 47-Day TLS Certificate Lifecycles
Publicly trusted SSL/TLS certificate lifetimes are getting shorter. Certificate validity is moving to 100 days in 2027 and 47 days in 2029. Now is the time to strengthen certificate inventory, renewal planning, domain validation, monitoring, and deployment workflows.
Operational impact
What the 47-Day Shift Means
An “SSL certificate” is the common term; TLS is the modern protocol used to secure internet-facing connections.
Shorter certificate lifetimes do not necessarily mean every certificate must be handled manually every 47 days. But they do make manual, spreadsheet-based, and poorly documented certificate processes harder to manage. Teams need clearer certificate ownership, dependable domain-control validation, accurate expiry monitoring, tested deployment procedures, and—where appropriate—repeatable automation.
This page focuses on publicly trusted SSL/TLS certificates used for internet-facing services. Private PKI and internal certificate policies can differ.
Three milestones
Public TLS Certificate Validity Timeline
Plan against the phased validity reductions rather than waiting for the final 47-day milestone.
- 199days
199-day maximum validity
Public TLS certificate validity entered the 199-day phase.
- 100days
100-day maximum validity
The next major public TLS certificate lifetime reduction begins.
- 47days
47-day maximum validity
Publicly trusted TLS certificates will be limited to a maximum validity of 47 days.
Exact certificate availability, validation requirements, and deployment processes vary by product and environment. Contact us to discuss your specific requirements.
Practical preparation
Your SSL/TLS Readiness Checklist
Start with the controls that make certificate lifecycle work visible and repeatable.
- Build a complete inventory of public SSL/TLS certificates.
- Record each certificate’s domains, expiry date, business owner, technical owner, and deployment location.
- Confirm access to DNS, website hosting, and email channels used for domain validation.
- Set expiry monitoring and a clear escalation process before a certificate becomes critical.
- Document renewal, reissue, installation, and emergency replacement procedures.
- Identify high-volume or business-critical systems that may benefit from repeatable or automated workflows.
Start with visibility. You cannot reliably renew, replace, or automate certificates you do not know about.
Priority teams
Who Should Start Preparing Now?
Preparation is especially important where certificate volume, infrastructure complexity, or service impact is higher.
SaaS platforms and API-driven applications
Businesses with many domains or subdomains
IT teams using multiple servers, clouds, CDNs, or load balancers
Digital agencies managing SSL certificates for clients
Organizations tracking renewals manually through calendars, inboxes, or spreadsheets
If you manage one simple website, preparation may be straightforward. You should still know who owns the certificate, how it is renewed, and what happens before it expires.
Quick answers
Frequently Asked Questions
When do 47-day TLS certificates begin?+
The 47-day maximum validity period for publicly trusted TLS certificates begins March 15, 2029. Before that, the maximum moves to 100 days on March 15, 2027.
Can a multi-year SSL purchase avoid the 47-day certificate rule?+
No. Commercial subscription terms and the validity of each issued certificate are different. Public TLS certificate validity requirements still apply when certificates are issued.
Do all certificates need manual renewal every 47 days?+
Not necessarily. The right approach depends on the certificate authority, environment, validation method, deployment setup, and available lifecycle management processes. Strong inventory and repeatable workflows become increasingly important.
Plan ahead
Get Ready Before Certificate Lifecycles Get Shorter
Acmetek SSL & Authentication Solutions Pvt. Ltd helps businesses in Hyderabad and across India choose, renew, and manage SSL/TLS certificate solutions. Talk to us about your domains, renewal process, certificate coverage, and readiness priorities.