SSL certificates are moving to 47-day lifetimes

The CA/Browser Forum approved a phased reduction of the maximum public TLS certificate lifetime: 200 days from March 2026, 100 days from March 2027, and 47 days from March 2029.

What it means

Renewals that used to happen once a year will happen roughly every month. Manual renewal stops being practical, and each automated renewal is another chance for a silent failure. Monitoring the live certificate is the safety net.