Certificate lifespans are a hot topic with both Apple and Google proposing to reduce the validity period of SSL / TLS certificates, which is still very much in discussion. But it’s not just SSL / TLS being impacted, Code Signing certificates are seeing similar trends.
Initiated by the Certificate Authority Browser Forum (CA/B Forum), the maximum validity period for Code Signing Certificates will be reduced from 39 months to 460 days.
What is Changing?
From the 15th June 2025, the CA/B Forum has directed that the maximum validity period for a Code Signing Certificate will be reduced from 39 months to 460 days. And to manage this change effectively, GlobalSign will stop issuing 2 Year and 3 Year Code Signing Certificates from the 28th February 2025.
Why is This Shift Happening?
This new directive is being introduced by the CA/B Forum as part of their best practice guidelines aimed at enhancing the security of digital certificates. By reducing the lifespan of certificates, the intent is to limit potential exposure to vulnerabilities that could arise from outdated or compromised certificates. As a Certificate Authority, we are adopting this change in accordance with the industry standards set by the CA/B Forum.
Whilst reduced lifespans do mean more frequent renewals, short lived certificates do have considerable benefits:
- Enhanced Security: Shorter validity periods allow for quicker updates and revocations of certificates, minimizing potential risks to your software and users.
- Streamlined Compliance: Shorter periods ensure your certificates reflect the latest security standards, keeping your software aligned with industry best practices. Additionally, more frequent renewals help you stay ahead of compliance requirements, reducing the risk of non-compliance.
How Does This Impact You?
This change will impact everyone, but it depends on your certificate status and requirements.
GlobalSign Are Here To Help
The reduced validity period will make certificate renewals more frequent, so it is important to review your certificate inventory and renewals in preparation for the 15th June 2025 deadline. In addition, GlobalSign’s Support Team are on hand to guide you through these changes to make this transition as seamless as possible.
Atlas Discovery and Certificate Management at Your Fingertips
