Certificate lifespans are a hot topic with both Apple and Google proposing to reduce the validity period of SSL / TLS certificates, which is still very much in discussion. But it’s not just SSL / TLS being impacted, Code Signing certificates are seeing similar trends.
Initiated by the Certificate Authority Browser Forum (CA/B Forum), the maximum validity period for Code Signing Certificates will be reduced from 39 months to 460 days.
What is Changing?
The CA/B Forum has directed that the maximum validity period for a Code Signing Certificate will be reduced from 39 months to 460 days, a change that will be made at some point in the coming months.
Why is This Shift Happening?
This new directive is being introduced by the CA/B Forum as part of their best practice guidelines aimed at enhancing the security of digital certificates. By reducing the lifespan of certificates, the intent is to limit potential exposure to vulnerabilities that could arise from outdated or compromised certificates. As a Certificate Authority, we are adopting this change in accordance with the industry standards set by the CA/B Forum.
Whilst reduced lifespans do mean more frequent renewals, short lived certificates do have considerable benefits:
- Enhanced Security: Shorter validity periods allow for quicker updates and revocations of certificates, minimizing potential risks to your software and users.
- Streamlined Compliance: Shorter periods ensure your certificates reflect the latest security standards, keeping your software aligned with industry best practices. Additionally, more frequent renewals help you stay ahead of compliance requirements, reducing the risk of non-compliance.
GlobalSign Are Here To Help
The reduced validity period will make certificate renewals more frequent, so it is important to review your certificate inventory and renewals in preparation for the change. In addition, GlobalSign’s Support Team are on hand to guide you through these changes to make this transition as seamless as possible.
Atlas Discovery and Certificate Management at Your Fingertips
