How the 199-day limit affects reissues, duplicates, and renewals
Reissues and duplicate certificates
When you reissue or duplicate a public TLS certificate, the new certificate's validity cannot exceed 199 days. Some reissued certificates may expire before the order expires.
To use the remaining validity on the order, reissue the certificate during the final 199 days of the order. You can request reissues with a validity of up to 199 days, or until the order expires, whichever is sooner.
Example: Reissuing a 1-year public TLS certificate
On February 23, 2026, DigiCert issued a 1-year Basic OV TLS certificate with a validity of 365 days, expiring February 23, 2027. The order and certificate share the same expiration date.
On February 25, 2026, the day after DigiCert implemented the 199-day maximum validity, the certificate is reissued. The reissued certificate has a maximum validity of 199 days and expires September 12, 2026.
On September 9, 2026, the certificate is reissued again. This reissued certificate has a validity of 167 days because the certificate validity cannot exceed the order validity.
If you have questions about what to expect during a reissue, contact your account manager or DigiCert Support before reissuing.
Renewals
The renewal process is unchanged. You can reissue a TLS certificate at any time and renew a TLS order up to 90 days before it expires.
Maximum validity period timeline for public TLS/SSL in the CA/Browser Forum
On February 24, 2026, DigiCert began issuing 199-day public TLS certificates. The maximum validity continues to reduce on the following schedule. To learn more about reducing public TLS certificate validity to 46 days, read our blog, TLS Certificate Lifetimes Will Officially Reduce to 47 days.
CA/Browser Forum | DigiCert | ||
|---|---|---|---|
Maximum certificate validity | Due date | Maximum certificate validity 1 | Timeline |
200 days | Between March 15, 2026, and March 15, 2027 | 199 days | Between February 24, 2026, and early 20272 |
100 days | Between March 15, 2027, and March 15, 2029 | 99 days | Between early 2027 and early 20292 |
47 days | After of March 15, 2029 | 46 days | After early 20292 |
1DigiCert's maximum certificate validity is one day shorter than that allowed by the CA/Browser Forum. We do this to avoid exceeding the maximum permitted validity. 2Future release dates are subject to change based on the latest CA/Browser Forum requirements. | |||