Changes in the validity and verification of certificates (from February 24, 2026)
On February 24, these important changes come into effect:
- Reduction of maximum validity:
- Public TLS certificates: new max. 199 days.
- Code Signing certificates: new max. 459 days.
- Changes in verification validity (re-use):
- Domain Verification (DCV): shortened to 199 days.
- Organization Verification (OV): for TLS certificates shortened to 397 days.
- Technical security innovations:
- MPIC: mandatory confirmation from 3 locations (2 different regions).
- DNSSEC & CAA: mandatory verification when checking the domain.