How DigiCert and its partners are putting trust to work to solve real problems today.
While the world is pushed—or forced—toward digitizing all business processes, workflows and functions, the lessons from the early days of the Internet can be a predictor of success. Learn how Digital Trust can make or break your strategy and how the wrong solution may be setting your organization up for failure in less than three years.
Due to CAB forum baseline requirements, we are no longer able to issue certificates with a lifetime of more than 825 days (or 27 months).
Technically speaking, our systems don't process a "reissue" order any differently than issuing a new certificate. So, after February 21, 2018, when you reissue your 3-year certificate, our system will automatically truncate your certificate lifetime to 825 days or until the original expiration date, whichever is less. Naturally, you may be concerned about losing certificate lifetime when you reissue and we understand.
We've provided an example below to help you understand how to get the maximum lifetime of your 3-year certificates.
Here's an example and graphic:
This reissued certificate has a maximum validity of 825 days (approximately 27 months) and expires on July 4, 2020.
This reissued certificate has a maximum validity of 713 days and still expires on July 4, 2020.
This date is within 825 days of the "original" certificate expiration date. Therefore, the reissued certificate will now have the same expiration date as the “original” certificate, expiring on January 1, 2021, giving you the full certificate lifetime.
This reissued certificate again has the same expiration date as the “original” certificate and the expiration date stays on January 1, 2021.
I hope this clarifies the process and gives you and your customers more clarity around this industry guideline change and how we handle it.