Friendly reminder that the first SSL/TLS certificate shortening cycle is approaching on March 15, 2027 (200 Days to 100 Days). Certificates generated after March 15, 2027, will have a maximum 100-day lifespan.
Over the past year, the information security team has supported and helped to transition many Facultys/Departments that have already migrated to certificate automation and are well prepared for the first shortening cycle.
As an industry wide move, the CA/Browser Forum of certificate authorities (CAs) has voted to reduce the lifespan of SSL/TLS certificates from 398 days to 47 days in 2029 to help improve security. SSL/TLS certificate lifespans will be gradually reduced beginning on March 15, 2026:
This industry mandated move helps to increase security, prepare for quantum challenges, encourages automation and operational excellence.
Next year, SSL/TLS certificates will gradually have a shorter lifespan (100 days) starting on March 15, 2027 until reaching a lifespan of 47 days on March 15, 2029. This provides time for organizations to transition to use certificate automation.
Facultys/Departments are encouraged to have an inventory of their SSL certificates and mapping their systems to adopt SSL Certificate Automation (ACME) or by using another automation protocol.
If you have any questions, please don’t hesitate to contact the Information Security team at c-it-security@mcmaster.ca
Service Updates, Zoom
Inside Mac ➚
Service Updates