Latest Update On Apple and Google’s Effort to Shorten The SSL Certificate Lifetime

Once again Apple and Google are reshaping the global Certificate Authority (CA) market. In 2018 we published a blog post about Google’s effort to enhance connection security; Google was encouraging – some might say forcing- website owners to secure their blogs and websites by installing SSL certificate. In October 2017 Google Chrome started showing “Not Secure” warning when visitors enter data on an HTTP page or if visiting HTTP page in private mode. In July 2018 Google launched the next phase, by shows “Not Secure” warning when visiting all HTTP sites through chrome. In this post, we will cover the basics and your options.

This time however they are setting a limit on maximum allowed lifetime for SSLs. On 3rd of March 2020, Apple announced “TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC must not have a validity period greater than 398 days.” And Google chrome followed suit, read more here. After 1st September if your SSL certificate Validity is more than 398-day you will receive the following error “ ERR_CERT_VALIDITY_TOO_LONG and will be treated as misissued.”

If you are using Let’s Encrypt you do NOT need to take any action. Certificates issued by Let’s Encrypt are valid for 90 days. However If you are using commercial SSL certificates, after 1st September 2020 you can only issue/renew SSL certificates for 1 year ONLY.

Here at Cirrus Hosting we are offering Let’s Encrypt to our customers, our website and WordPress hosting clients are now able to activate Lets Encrypt through their control panel. We also offer Commercial Certificate to our customers. For detail information about the Type of SSL certificates we offer please click here.

About Cirrus Tech Ltd

Cirrus Tech Ltd. has been actively promoting its services to the hosting industry since 1999. The company has focused on 24/7 tech support, value-added services and a cooperative attitude towards all its clients. Cirrus is now one of Canada’s largest Web/Cloud Hosting companies.