{"id":26231,"date":"2026-03-17T10:12:16","date_gmt":"2026-03-17T10:12:16","guid":{"rendered":"https:\/\/www.heartinternet.uk\/blog\/?p=26231"},"modified":"2026-03-17T10:12:16","modified_gmt":"2026-03-17T10:12:16","slug":"ssl-certificates-are-changing-heres-what-you-need-to-know","status":"publish","type":"post","link":"https:\/\/www.heartinternet.uk\/blog\/ssl-certificates-are-changing-heres-what-you-need-to-know\/","title":{"rendered":"SSL Certificates are changing. Here&#8217;s what you need to know."},"content":{"rendered":"<p>The rules around SSL certificates are changing across the whole internet. The good news is that for most customers, very little will change on your side.<\/p>\n<p>This is an industry-wide update, and we\u2019ll handle the practical bits wherever we manage your SSL.<\/p>\n<h2>What is changing?<\/h2>\n<p>From 15 March 2026, newly issued SSL certificates will only be able to remain technically active for up to 200 days at a time, which is just under seven months.<\/p>\n<p>Right now, most SSL certificates can last up to 398 days.<\/p>\n<p>Any certificates issued before 15 March 2026 will remain valid until their normal expiry date. Nothing changes for those.<\/p>\n<h2>Why is this happening?<\/h2>\n<p>This change comes from the CA\/Browser Forum, the industry group that sets security standards for browsers and certificate authorities.<\/p>\n<p>Shorter certificate lifetimes improve security. If a certificate or encryption key were ever compromised, a shorter lifetime limits how long it could be used. It also encourages better automation and more frequent verification.<\/p>\n<p>Put simply, the industry is moving towards SSL that is renewed and re-verified more often, ideally automatically.<\/p>\n<h2>What does this mean for you?<\/h2>\n<p>For most customers, this will be largely invisible.<\/p>\n<p>Your website will still be protected by SSL and visitors will still see the familiar padlock in their browser.<\/p>\n<p>The main difference is that, within an annual SSL subscription, your certificate may need to be re-verified once during the term to meet the new 200 day rule.<\/p>\n<p>Where Heart Internet manages your domain\u2019s DNS, we will handle this re-verification automatically using a DNS verification record. Your certificate stays active and your site stays secure.<\/p>\n<p>You may occasionally receive an automated email from the certificate issuer to your domain\u2019s admin contact email address. This is expected and usually does not require a response, but it is worth making sure your admin contact email is up to date.<\/p>\n<p>If you manage your SSL certificates or DNS settings outside of Heart Internet, you may need to complete the re-verification yourself. We will provide guidance in advance if this applies to you.<\/p>\n<h2>More changes are planned<\/h2>\n<p>The move to 200 days is the first step. The industry plans to shorten certificate lifetimes further over the next few years:<\/p>\n<ul>\n<li><strong>2026:<\/strong> maximum certificate lifetime 200 days<\/li>\n<li><strong>2027:<\/strong> maximum certificate lifetime 100 days<\/li>\n<li><strong>2029:<\/strong> maximum certificate lifetime 47 days<\/li>\n<\/ul>\n<p>This may sound dramatic, but the long-term goal is for SSL renewal and re-verification to be fully automated, so most website owners never have to think about it.<\/p>\n<h2>How Heart Internet helps<\/h2>\n<p>At Heart Internet, we aim to keep things simple.<\/p>\n<p>Where we manage your SSL, we will take care of the re-verification process for you. Your billing cycle, renewal date and subscription terms remain unchanged. We\u2019re simply doing a bit more work in the background to keep everything compliant and running smoothly.<\/p>\n<p>If you have any questions, our support team is here to help.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The rules around SSL certificates are changing across the whole internet. The good news is that for most customers, very little will change on your side. This is an industry-wide&#8230;<\/p>\n","protected":false},"author":2,"featured_media":26240,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[164,20],"tags":[173,179,176],"class_list":["post-26231","post","type-post","status-publish","format-standard","has-post-thumbnail","category-news","category-security","tag-ssl","tag-ssl-certificates","tag-ssl-update"],"_links":{"self":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts\/26231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/comments?post=26231"}],"version-history":[{"count":2,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts\/26231\/revisions"}],"predecessor-version":[{"id":26234,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/posts\/26231\/revisions\/26234"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/media\/26240"}],"wp:attachment":[{"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/media?parent=26231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/categories?post=26231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.heartinternet.uk\/blog\/wp-json\/wp\/v2\/tags?post=26231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}