Overview
This article contains information regarding upcoming changes impacting maximum validity for SSL/TLS certificates, related domain validation data, and identity information. This page will be revised regularly to reflect new updates. We recommend you bookmark or revisit this for the latest changes and developments.
The information provided here is for customers on the Atlas platform. For GCC customers, please refer to this page↗. Can't find what you're looking for? Get in touch↗ for assistance.
General Questions
Effective March 15, 2026, new CA/B Forum Baseline Requirements for publicly-trusted TLS certificates take effect, mandating:
- Certificates issued on or after this date are limited to a maximum validity of 200 days.
- Identity validation reuse for all publicly trusted certificates is limited to 398 days.
- Domain / IP address validation reuse is limited to 200 days.
This change is part of series of maximum validity reductions for publicly trusted TLS certificates, taking place through 2029, ultimately limiting certificates to a maximum validity of 47 days. These changes are intended to reduce exposure time compromised keys, reduce reliance on revocation systems, and to encourage best practices of more agile and automated PKI.
Important Dates
While 200 days is the maximum permitted validity of a publicly-trusted TLS certificate, the maximum recommended validity is 199 Days.
GlobalSign will limit the validity of its publicly-trusted TLS certificates to 199 days, and follow this pattern in limiting identity reuse to 397 days and domain validation reuse to 199 days.
| Date | Events |
|---|---|
|
February 2, 2026 |
Existing domains on Atlas aligned to 199-day reuse policy. |
|
March 10, 2026 |
Atlas certificates begin issuing with max validity of 199-days |
|
March 14, 2026 |
GlobalSign in full enforcement mode for reduced validity requirements. |
|
March 15, 2026 |
CA/B Forum TLS Baseline Requirements for 200-day max validity in full effect. |
Impacts and Recommendations
The primary impact of 199-day validity is replacing certificates more frequently. The exact workflow will depend on:
-
Whether you order through the Web UI, API, or 3rd-Party Integration.
| In scope | Out of scope |
|---|---|
|
All publicly-trusted TLS Certificates in Atlas:
|
Certificates issued under:
|
| For GCC, please refer to this page↗. | |
Effective March 10, 2026, all newly issued or reissued publicly trusted TLS certificates will have a maximum validity of 199 days.
- Customers using product packs with 1‑year entitlements remaining as of March 10, 2026 will get an extra certificate per unissued certificate in the pack, via a zero‑dollar quote.
- Customers using SAN Licensing can add or remove SANs just as they do today, however the issued certificates will now have a 199-day max validity. The SAN License term remains the same, only the validity of each issued certificate is shortened.
Effective February 2, 2026:
-
Existing domains on Atlas will align to the 199-day reuse policy.
-
Existing domains last validated March 14, 2025 or later will have their expiration dates reduced by 6-Months, expiring either 199 days from its last validation or on March 14, 2026, whichever is later.
-
-
Renew existing domains early, prior to March 14, 2026 to avoid disruptions.
-
After February 2, 2026, you can login to see the new effective expiration date of your pre-validated domains.
-
All newly added domains from this date forward will have a validity of 199 days.