#KEYMASTER | The 47-Day Countdown: Preparing for Short-Lived Public TLS Certificates

In this episode of #KEYMASTER, product owner Mats Rosberg joins Sven Rajala, International PKI Man of Mystery, to unpack the industry-wide changes around public TLS certificate lifespans, specifically the move toward a 47-day validity period. Shorter certificate lifespans demand automation. Manually managing and rotating certificates every few weeks simply isn’t feasible at scale. Organizations—especially CAs (Certificate Authorities) and DevOps teams, must embrace automated issuance, renewal, and deployment processes. It’s not just about certificates, either. CAs will also have to validate domain ownership and applicant identity more frequently. By 2029, that validation data will only be reusable for 10 days, further driving the need for automation across the ecosystem. 💡 Summary For a written summary with detailed explanations and links, see the Tech Update: https://www.ejbca.org/resources/keyma... 🔗 Learn more The 47-day validity period is specified in the CA/B Forum TLS Baseline requirements: https://cabforum.org/working-groups/s... ℹ️ Keyfactor for Developers Your hub for cryptography, PKI, and signing—get tools, docs, and hands-on resources to get started—build, secure, and automate. Find more resources on https://www.keyfactor.com/keyfactor-f.... ✉️ Newsletter Sign up for our newsletter: https://www.ejbca.org/#popup-newsletter Disclaimer The information provided in this video is for educational purposes only. While we aim to offer helpful concepts and best practices, viewers should exercise their own discretion and judgment when applying the information. We do not guarantee the accuracy or completeness of the content, and the creators and contributors shall not be held responsible for any errors or actions taken based on the information presented. By watching this video, you acknowledge and accept that you are solely responsible for your decisions and actions.