Shortening of TLS and Code Signing Certificate Validity from 24th February 2026

(January 23, 2026) The day of February 24, 2026, is a milestone for digital certificates - not only does their validity period shorten to 199 days, but there are also further changes to the principles of verification and active verification validity. Get acquainted with all the changes.

What changes from February 24, 2026?

From this day, the following changes affecting certificate issuance will take place.

  • Transition to 199-day validity for public TLS certificates
  • Shortening the re-use period of domain verification to 199 days
  • Shortening the re-use period of organizational verification for public OV TLS certificates to 397 days
  • Transition to 459-day validity for public code signing certificates
  • Enforcement of MPIC confirmation using three remote sites from two different regions
  • DNSSEC verification when verifying domain control and conducting CAA checks

For customers, the most important is the shortening of TLS and Code Signing certificate validity. It is important to realize that the verification intervals for domains and organizations will progressively shorten just like the certificate validity.

Source and more information: DigiCert changelog, available at docs.digicert.com.