ssl — LowEndSpirit

47-Day SSL/TLS Certificates by 2029

FatGrizzly — Thu, 26 Jun 2025 16:26:44 +0000

TLDR: CA/B had a voting(proposed by apple), to reduce SSL's validity to 47 days(applicable from 2029).

Every CA and CA Consumer voted in favor.

Timeline:

Phased Reduction Timeline

March 15, 2026:
    Maximum certificate lifespan: 200 days
    Domain validation reuse: 200 days (down from 398 days)
    OV/EV validation reuse (SII): 398 days (down from 825 days)
March 15, 2027:
    Maximum certificate lifespan: 100 days
    Domain validation reuse: 100 days
March 15, 2029:
    Maximum certificate lifespan: 47 days
    Domain validation reuse: 10 days

https://www.ssl.com/article/preparing-for-47-day-ssl-tls-certificates/

This is sad. This is gonna be a pain in the ass for several people. Especially where ACME can't be implemented.

FREE 1 Year SSL Certificate

dwight — Sun, 08 Dec 2024 10:04:13 +0000

I found the following offer:
Free 13 months SSL certificate: https://my.dnshe.com/cart.php?gid=4&language=english

Each user is limited to three free certificates. The use of temporary email addresses for registration is prohibited.

Buypass revoked 86484 Buypass Go/ACME certificates

dwight — Mon, 08 Jan 2024 22:49:22 +0000

Buypass used third party resolvers (Google DNS) to lookup DNS records in Buypass ACME, which isn't allowed.

They revoked all ACME certificates issued before Dec 22, 2023.

What are the free SSL certificate options?

dwight — Mon, 01 May 2023 18:22:31 +0000

Let's Encrypt !!!!!!!!!!!!!!!!
Google
Buypass
ZeroSSL
SSL.com

Are there any other CAs provide free SSL certificates? Are there any CAs offer free IPv4/IPv6 certificates?
Also, what's the lowest price for a code signing certificate?

Lets Encrypt removes compatilibility with older browsers

mikho — Sat, 15 May 2021 22:29:53 +0000

Hello from the staff at Let's Encrypt.

On September 30, there will be a change in how older browsers and
devices trust Let's Encrypt certificates, resulting in a minor decrease
in compatibility. If you run a typical website, you won't notice a
difference. Devices and browsers running up-to-date software will
continue working fine, and we've taken steps to make sure the vast
majority of older devices will too. If you run a large website, or need
to support less common software (particularly non-browser software),
you'll want to read about the details at:

https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

In either case, no action is required from you. We're letting you know
so you can provide answers to any questions your site visitors may have.

Here is a sample hostname from one of your current Let's Encrypt
certificates:

Since 2015 we've served the world with 1.6 billion free certificates,
each one providing security and privacy to people on the Web. It's work
that's 100% funded by charitable donations since we are a nonprofit. If
your company is interested in sponsorship, please email
sponsor@letsencrypt.org. If you can make a donation, we ask that you
consider supporting our work today: https://letsencrypt.org/donate/
Thank you.

The Let's Encrypt team