Stay Ahead of What’s Changing in Digital Trust

DigiCert Change DATE

Product Change

Related Links

Feb 24, 2026

Public TLS 199-day validity

Enforcement Date: Mar 15, 2026 (CA/Browser Forum)

• TLS Certificate Lifetimes Will Officially Reduce to 47 Days
• Why Shorter TLS Validity Raises the Bar
• Moving to 199-day validity for public TLS certificates

Feb 24, 2026

Public Code Signing 459-day validity

Enforcement Date: Mar 1, 2026 (CA/Browser Forum)

• Understanding the New Code-Signing Certificate Validity Change
• Moving to 459-day validity for public code signing certificates

Feb 24, 2026

Domain validation 199-day reuse period

Enforcement Date: Mar 15, 2026 (CA/Browser Forum)

• Shortening the domain validation reuse period to 199 days

Feb 24, 2026

Organization validation 397-day reuse period (public OV TLS)

Enforcement Date: Mar 15, 2026 (CA/Browser Forum)

• Shortening the organization validation reuse period for public OV TLS certificates to 397 days

Feb 24, 2026

Next stage of MPIC enforcement - 3 remote perspectives

Enforcement Date: Mar 15, 2026 (CA/Browser Forum)

• Multi-Perspective Issuance Corroboration for Digital Certificates
• Enforcing MPIC corroboration using three remote locations from two different regions

Feb 24, 2026

CertCentral legacy ACME EOL

• Retiring the legacy ACME service in CertCentral

Mar 1, 2026

Legacy Code Signing GitHub Action end of support

• Legacy Code signing with Software Trust Manager GitHub Actions
• New Code signing with DigiCert Software Trust Manager GitHub Actions

Mar 3, 2026

DNSSEC validation takes effect

Enforcement Date: Mar 15, 2026 (CA/Browser Forum)

• Enable DNSSEC to Prevent Security Issues
• Validating DNSSEC when verifying domain control and performing CAA checks

Mar 10, 2026

New IP addresses

• DigiCert adding new dedicated IPv4 and IPv6 addresses

April 15, 2026

Root policy: Chrome and Mozilla removal of public G1 root certificates

Enforcement Date: Apr 15, 2026 (Chrome, Mozilla)

• DigiCert root and intermediate CA certificate updates

May 1, 2026

Legacy Code Signing GitHub Action end of life

• Legacy Code signing with Software Trust Manager GitHub Actions
• New Code signing with DigiCert Software Trust Manager GitHub Actions

May 15, 2026

Root policy: Revoke G2/G3 multipurpose ICAs and G5 cross-root certificates

Enforcement Date: Jun 15, 2026 (Chrome)

• Revoking specific ICA and end-entity certificates as DigiCert transitions to dedicated TLS root hierarchies

TBD

Next stage of MPIC enforcement - 4 remote perspectives (TLS and S/MIME)

Enforcement Date: Jun 15, 2026 (CA/Browser Forum)

• Multi-Perspective Issuance Corroboration for Digital Certificates
• Enforcing MPIC corroboration using three remote locations from two different regions

TBD

Chrome policy: Mandatory CT logging for public TLS

Enforcement Date: Jun 15, 2026 (CA/Browser Forum)

• Coming soon

TBD

Next stage of MPIC enforcement - 5 remote perspectives

Enforcement Date: Dec 15, 2026 (CA/Browser Forum)

• Multi-Perspective Issuance Corroboration for Digital Certificates
• Enforcing MPIC corroboration using three remote locations from two different regions

Mar 1, 2027

Root policy: Client Authentication EKU removal from public TLS

Enforcement Date: Mar 15, 2027 (Chrome)

• What the End of Dual-EKU TLS Means for ClientAuth and mTLS
• How the ClientAuth Crackdown Is Pushing Finance Toward X9 PKI
• Sunsetting the client authentication EKU from DigiCert public TLS certificates

TBD

Public TLS 99-day validity

Enforcement Date: Mar 15, 2027 (CA/Browser Forum)

• TLS Certificate Lifetimes Will Officially Reduce to 47 Days
• Why Shorter TLS Validity Raises the Bar

TBD

Domain validation 99-day reuse period

Enforcement Date: Mar 15, 2027 (CA/Browser Forum)