Skip to main content

2 年 DV、OV 和 EV 公用 SSL/TLS 憑證結束

這如何影響我現有的 2 年期公用 SSL/TLS 憑證?

此變更不會影響在截止日期 2020 年 8 月 27 日前發行的啟用的 2 年期憑證。這些憑證將持續受到信任,直到到期為止。

例如,在 2020 年 8 月 10 日,您購買了 2 年期 OV SSL/TLS 憑證。我們在 2020 年 8 月 12 日發行憑證。當憑證接近到期日時,除了以另一份 2 年期 SSL/TLS 憑證續訂外,您需要以 1 年期憑證續訂,或從 DigiCert® 多年套餐訂購憑證。

Example: Reissuing a 1-year public TLS certificate

  1. On February 23, 2026, DigiCert issued a 1-year Basic OV TLS certificate with a validity of 365 days, expiring February 23, 2027. The order and certificate share the same expiration date.

  2. On February 25, 2026, the day after DigiCert implemented the 199-day maximum validity, the certificate is reissued. The reissued certificate has a maximum validity of 199 days and expires September 12, 2026.

  3. On September 9, 2026, the certificate is reissued again. This reissued certificate has a validity of 167 days because the certificate validity cannot exceed the order validity.

If you have questions about what to expect during a reissue, contact your account manager or DigiCert Support before reissuing.

Renewals

The renewal process is unchanged. You can reissue a TLS certificate at any time and renew a TLS order up to 90 days before it expires.

Maximum validity period timeline for public TLS/SSL in the CA/Browser Forum

On February 24, 2026, DigiCert began issuing 199-day public TLS certificates. The maximum validity continues to reduce on the following schedule. To learn more about reducing public TLS certificate validity to 46 days, read our blog, TLS Certificate Lifetimes Will Officially Reduce to 47 days.

Table 1. CA/Browser Forum due dates and DigiCert timelines for reducing TLS certificate validity

CA/Browser Forum

DigiCert

Maximum certificate validity

Due date

Maximum certificate validity 1

Timeline

200 days

Between March 15, 2026, and March 15, 2027

199 days

Between February 24, 2026, and early 20272

100 days

Between March 15, 2027, and March 15, 2029

99 days

Between early 2027 and early 20292

47 days

After of March 15, 2029

46 days

After early 20292

1DigiCert's maximum certificate validity is one day shorter than that allowed by the CA/Browser Forum. We do this to avoid exceeding the maximum permitted validity.

2Future release dates are subject to change based on the latest CA/Browser Forum requirements.