Skip to main content

终止 2 年期 DV、OV 和 EV 公共 SSL/TLS 证书

这对我现有的 2 年期公共 SSL/TLS 证书会有什么影响?

此更改不会影响在 2020 年 8 月 27 日截止之前颁发的有效的 2 年期证书。这些证书在到期之前将继续受到信任。

例如,您在 2020 年 8 月 10 日购买了 2 年期 OV SSL/TLS 证书。我们在 2020 年 8 月 12 日颁发了证书。当该证书即将到期时,您无需再另外续订一个 2 年期 SSL/TLS 证书,而是续订 1 年期证书或通过 DigiCert® 多年计划订购证书。

Example: Reissuing a 1-year public TLS certificate

  1. On February 23, 2026, DigiCert issued a 1-year Basic OV TLS certificate with a validity of 365 days, expiring February 23, 2027. The order and certificate share the same expiration date.

  2. On February 25, 2026, the day after DigiCert implemented the 199-day maximum validity, the certificate is reissued. The reissued certificate has a maximum validity of 199 days and expires September 12, 2026.

  3. On September 9, 2026, the certificate is reissued again. This reissued certificate has a validity of 167 days because the certificate validity cannot exceed the order validity.

If you have questions about what to expect during a reissue, contact your account manager or DigiCert Support before reissuing.

Renewals

The renewal process is unchanged. You can reissue a TLS certificate at any time and renew a TLS order up to 90 days before it expires.

Maximum validity period timeline for public TLS/SSL in the CA/Browser Forum

On February 24, 2026, DigiCert began issuing 199-day public TLS certificates. The maximum validity continues to reduce on the following schedule. To learn more about reducing public TLS certificate validity to 46 days, read our blog, TLS Certificate Lifetimes Will Officially Reduce to 47 days.

1. CA/Browser Forum due dates and DigiCert timelines for reducing TLS certificate validity

CA/Browser Forum

DigiCert

Maximum certificate validity

Due date

Maximum certificate validity 1

Timeline

200 days

Between March 15, 2026, and March 15, 2027

199 days

Between February 24, 2026, and early 20272

100 days

Between March 15, 2027, and March 15, 2029

99 days

Between early 2027 and early 20292

47 days

After of March 15, 2029

46 days

After early 20292

1DigiCert's maximum certificate validity is one day shorter than that allowed by the CA/Browser Forum. We do this to avoid exceeding the maximum permitted validity.

2Future release dates are subject to change based on the latest CA/Browser Forum requirements.