90-Day certificates are coming, it's time to automate!
Organizations that are still taking a manual approach to digital certificate management have heightened risk of outages, breaches, and increased costs.
With the upcoming changes to SSL/TLS certificate validity periods, automate certificate lifecycle management and experience full peace of mind with Sectigo Certificate Manager.
Talk to one of our experts!
Unlock the power of CLM with Sectigo Certificate Manager
Sectigo offers an automated Certificate Lifecycle Management (CLM) platform that creates a reliable, consistent, touchless process for the entire lifecycle of digital certificates. From discovering and provisioning to revoking and replacing or renewing, and all the subtasks in between, our CA agnostic platform allows organizations to manage all of these tasks in one place.
Certificate lifespans are shrinking, it’s time to automate
The trend of shrinking certificate lifespans is one Sectigo predicted as far back as 2019. In recent years the maximum term for a public TLS (also called SSL) certificate has dropped from three years to two to one, and on March 3, Google announced in its “Moving Forward, Together” roadmap the intention to reduce the maximum validity for public SSL/TLS certificates from 398 days to 90 days, in a future policy update or a CA/B Forum Ballot Proposal. Though the specific timing of when this 90-day maximum will go into effect is unknown, it’s likely to happen by the end of 2024.
Reducing certificate lifetime encourages automation and the adoption of practices that will drive the ecosystem away from baroque, tule-consuming, and error-prone issuance processes."
Why you should act now
This step toward even shorter certificate lifespans represents a significant change in how companies will approach digital trust. The traditional approach of undertaking the lifecycle management of digital certificates with spreadsheets and siloed point-solutions is no longer sustainable. Most enterprises have a large number of digital certificates, which will make manual management of the 90-day certificates a tedious task.
The Automatic Certificate Management Environment (ACME) is the preferred automation protocol for public certificate issuance and management. Google highlights ACME as core to the automation of digital certificate lifecycles and lays out the benefits of automation in the context of shorter certificate lifespans. These include increased resilience and agility, which can help organizations more easily transition to quantum-resistant algorithms. However, the benefits of automation don’t stop there.
Reduce the risk of human error. Manual processes are prone to mistakes, such as misconfiguration or missing a renewal deadline, which can result in cybersecurity vulnerabilities, outages and breaches. Automation can help ensure that all digital certificates across a network are deployed correctly, and critical tasks such as key rotation and certificate revocation are performed promptly and without error.
Spend less by automating certificate management. It could easily take over an hour for an administrator to manually renew a single digital certificate. This is incredibly costly at scale and error-prone. Automation removes the need for this time-intensive manual approach and allows administrators to focus on more important tasks.
Comply with industry regulations and standards. Automated certificate management processes can provide organizations with better visibility into their certificate inventory, making it easier to track and manage certificates across the organization.
Easily manage growing numbers of digital certificates and scale them across increasingly complex enterprise network environments.
Build a powerful CLM platform with Sectigo
Sectigo Certificate Manager integrates with leading technology providers to give customers deployment flexibility and customizations to work within their unique environments.
50+ Technology Integrations
Explore our integrations with tech partners. DevOps, endpoints, standpoints, key vaults and e-mail.
