{"id":4941,"date":"2026-06-15T11:16:30","date_gmt":"2026-06-15T09:16:30","guid":{"rendered":"https:\/\/www.manage-now.de\/?p=4941"},"modified":"2026-06-29T11:27:47","modified_gmt":"2026-06-29T09:27:47","slug":"certificates-47-days-and-no-plan-why-the-management-of-digital-certificates-is-becoming-the-most-urgent-governance-issue-in-it-security","status":"publish","type":"post","link":"https:\/\/www.manage-now.de\/en\/blog\/certificates-47-days-and-no-plan-why-the-management-of-digital-certificates-is-becoming-the-most-urgent-governance-issue-in-it-security\/","title":{"rendered":"TLS Certificates Valid for Only 47 Days: Automated Certificate Management Becomes Essential"},"content":{"rendered":"<section class=\"page-content\"\n         data-header=\"dark\">\n    <div class=\"container\">\n                    <div class=\"details-text-content\">\n                                <p>&nbsp;<\/p>\n<p class=\"isSelectedEnd\"><em>Starting in 2029, publicly trusted TLS certificates will be limited to a maximum validity period of just 47 days\u2014a decision by the CA\/Browser Forum that will make manual certificate management practically impossible for most organizations. A company managing 500 TLS certificates will need to handle approximately 4,000 renewal events per year instead of just one annual renewal cycle. Organizations that fail to implement an automation strategy today risk certificate outages, operational disruptions, and compliance violations.  <\/em><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n                    <\/div>\n        \n    <\/div>\n<\/section><section class=\"page-content\"\n         data-header=\"dark\">\n    <div class=\"container\">\n                    <div class=\"details-text-content\">\n                                <h2>What Are Digital Certificates\u2014and Why Are They Business-Critical?<\/h2><p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"68:1-68:207;3358-3564\">Digital certificates are the foundation of trust in modern IT infrastructures. They authenticate servers and applications, encrypt communication channels, and ensure the integrity of digital processes <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"70:1-70:26;3566-3591\">Typical Use Cases:<\/p>\n<ul data-spread=\"false\">\n<li>TLS\/SSL Connections for Websites and Applications<\/li>\n<li>Software and Document Signing<\/li>\n<li>S\/MIME-Secured Email Communications<\/li>\n<li>VPN Connections<\/li>\n<li>IoT Devices and Connected Manufacturing Systems<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>When a certificate expires, applications may become inaccessible or systems may refuse to communicate with one another. Particularly concerning is the fact that many organizations lack both comprehensive certificate inventories and automated alerting mechanisms. <\/p>\n<p>&nbsp;<\/p>\n                    <\/div>\n        \n    <\/div>\n<\/section>\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<section class=\"page-content\"\n         data-header=\"dark\">\n    <div class=\"container\">\n                    <div class=\"details-text-content\">\n                                <h2>TLS Certificates: The 47-Day Rule Is Coming<\/h2><p>The CA\/Browser Forum has decided to gradually reduce the maximum validity period of publicly trusted TLS certificates.<\/p>\n<p>&nbsp;<\/p>\n                    <\/div>\n        \n    <\/div>\n<\/section>\n<div style=\"height:10px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<section class=\"page-content\"\n         data-header=\"dark\">\n    <div class=\"container\">\n                    <div class=\"details-text-content\">\n                                <h3>What Has the CA\/Browser Forum Decided\u2014and When Will It Take Effect?<\/h3><p>The CA\/Browser Forum has formally approved a four-stage reduction in the maximum validity period of publicly trusted TLS certificates:<\/p>\n<ul>\n<li>Until March 14, 2026: maximum validity of 398 days \u2014 the current status quo <\/li>\n<li>From March 15, 2026: maximum validity of 200 days \u2014 the first reduction puts manual processes under pressure <\/li>\n<li>From March 15, 2027: maximum validity of 100 days \u2014 manual certificate management becomes critical <\/li>\n<li>From March 15, 2029: maximum validity of <strong>47 days<\/strong> \u2014 <strong>full automation becomes mandatory<\/strong><\/li>\n<\/ul>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"93:1-93:220;4646-4865\">At the same time, the reusability period for domain validations will be reduced to just <strong>10 days<\/strong>. This means that not only will certificate renewal frequency increase, but the entire validation infrastructure must also be fundamentally rethought. <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"95:1-95:170;4867-5036\"><strong>For IT decision-makers<\/strong>, the first major milestone is March 15, 2026\u2014just a few months away. Process adjustments should begin now, not in 2028. <\/p>\n<p>&nbsp;<\/p>\n                    <\/div>\n        \n    <\/div>\n<\/section>\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<section class=\"page-content\"\n         data-header=\"dark\">\n    <div class=\"container\">\n                    <div class=\"details-text-content\">\n                                <h2>What Does the 47-Day Rule Mean in Practice for IT Operations?<\/h2><p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"101:1-101:260;5108-5367\">A company managing 500 TLS certificates currently renews them once per year\u2014resulting in 500 renewal events annually. Starting in 2029, this workload will increase to approximately <strong>4,000 renewal events per year.<\/strong> Each renewal process involves validation, deployment, testing, and documentation.  <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"103:1-103:140;5369-5508\">Manual processes do not just reach their capacity limits\u2014they are also highly prone to error. A single missed certificate renewal can result in: <\/p>\n<ul class=\"[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3\" data-sourcepos=\"105:1-108:67;5510-5761\">\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"105:1-105:76;5510-5585\">Disrupted HTTPS Connections and Security Warnings Displayed to Users<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"106:1-106:48;5586-5633\">Disrupted API Communication Between Systems<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"107:1-107:61;5634-5694\">Production Environments in OT\/IoT Infrastructures Being Brought to a Standstill<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"108:1-108:67;5695-5761\">Compliance Violations Related to NIS2, DORA, or eIDAS 2.0 Requirements<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n                    <\/div>\n        \n    <\/div>\n<\/section>\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<section class=\"page-content\"\n         data-header=\"dark\">\n    <div class=\"container\">\n                    <div class=\"details-text-content\">\n                                <h2>What Is Certificate Lifecycle Management (CLM)?<\/h2><p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"114:1-114:194;5825-6018\"> Certificate Lifecycle Management (CLM<strong>)<\/strong> refers to the structured, automated management of digital certificates throughout their entire lifecycle\u2014from issuance to revocation.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"116:1-116:33;6020-6052\">A professional CLM solution includes:<\/p>\n<ul class=\"[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3\" data-sourcepos=\"118:1-123:62;6054-6382\">\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"118:1-118:86;6054-6139\"><strong>Inventory<\/strong> Management of All Certificates (Including Shadow IT and Forgotten Certificates)<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"119:1-119:52;6140-6191\"><strong>Automated Certificate Issuance and Deployment<\/strong><\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"120:1-120:38;6192-6229\"><strong>Proactive Certificate<\/strong> Renewal Before Expiration<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"121:1-121:44;6230-6273\"><strong>Revocation <\/strong>of Compromised Certificates<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"122:1-122:47;6274-6320\"><strong>Continuous Monitoring<\/strong> and Alerting<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"123:1-123:62;6321-6382\"><strong>Audit-Proof Documentation<\/strong> for Compliance and Regulatory Requirements<\/li>\n<\/ul>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"125:1-125:201;6384-6584\">A professional CLM solution reduces operational risk, provides full visibility across the entire certificate landscape, and is the key prerequisite for meeting the 47-day certificate validity requirement without increasing operational overhead.<\/p>\n<p data-sourcepos=\"125:1-125:201;6384-6584\">\n                    <\/div>\n        \n    <\/div>\n<\/section>\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<section class=\"page-content\"\n         data-header=\"dark\">\n    <div class=\"container\">\n                    <div class=\"details-text-content\">\n                                <h2>Which Compliance Requirements Are Affected?<\/h2><p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"131:1-131:113;6648-6760\">In addition to the technical changes, regulatory requirements for certificate management are also becoming more stringent:<\/p>\n<ul class=\"[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3\" data-sourcepos=\"133:1-135:82;6762-7089\">\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"133:1-133:137;6762-6898\"><strong><a class=\"underline underline underline-offset-2 decoration-1 decoration-current\/40 hover:decoration-current focus:decoration-current\" href=\"https:\/\/www.manage-now.de\/en\/blog\/nis2-in-practice\/\">NIS2<\/a><\/strong> \u2013 Requirements for Cryptography, Encryption, and Incident Response<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"134:1-134:109;6899-7007\"><strong>DORA<\/strong> \u2013 Digital Operational Resilience in the Financial Sector, Including Documentation and Evidence Requirements for IT Security Measures <\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"135:1-135:82;7008-7089\"><strong>eIDAS 2.0<\/strong> \u2013 Requirements for Trust Services and Electronic Signatures<\/li>\n<\/ul>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"137:1-137:152;7091-7242\">An integrated CLM solution provides the documentation and audit trail required to support compliance with all three regulatory frameworks\u2014significantly reducing overall compliance effort in the process.<\/p>\n<p>&nbsp;<\/p>\n                    <\/div>\n        \n    <\/div>\n<\/section>\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<section class=\"page-content\"\n         data-header=\"dark\">\n    <div class=\"container\">\n                    <div class=\"details-text-content\">\n                                <h2>Conclusion \u2013 What Should IT Decision-Makers Do Now?<\/h2><p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"143:1-143:124;7311-7434\">The reduction of certificate validity periods has been decided and is not open for negotiation. The first phase will already take effect in March 2026. <\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"145:1-145:49;7436-7484\"><strong>Three Immediate Actions for IT Decision-Makers:<\/strong><\/p>\n<ol class=\"[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-decimal flex flex-col gap-1 pl-8 mb-3\" data-sourcepos=\"147:1-149:116;7486-7845\">\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"147:1-147:149;7486-7634\"><strong>Create a Certificate Inventory<\/strong> \u2013 Establish a complete overview of all TLS certificates, including expiration dates, ownership, and the systems they support. <\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"148:1-148:95;7635-7729\"><strong>Evaluate Automation Options<\/strong> \u2013 Assess CLM tools, ACME protocol integration, and connectivity with certificate authorities (CAs).<\/li>\n<li class=\"font-claude-response-body whitespace-normal break-words pl-2\" data-sourcepos=\"149:1-149:116;7730-7845\"><strong>Develop a CLM Strategy <\/strong>\u2013 Treat certificate lifecycle management as a long-term architectural decision, not merely a short-term tooling project.<\/li>\n<\/ol>\n<p class=\"isSelectedEnd\">Organizations that act early can reduce risk, strengthen the resilience of their IT infrastructure, and establish a solid foundation for meeting future compliance requirements.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: center\">Manage Now unterst\u00fctzt IT-Entscheider beim Aufbau eines automatisierten Zertifikatsmanagements \u2013 von der Analyse der bestehenden Zertifikatslandschaft bis zur Einf\u00fchrung einer nachhaltigen CLM-Strategie.<br \/>\n<a class=\"underline underline underline-offset-2 decoration-1 decoration-current\/40 hover:decoration-current focus:decoration-current\" href=\"https:\/\/www.manage-now.de\/en\/contact\/\"><strong><span style=\"text-decoration: underline\"><strong>Sprechen Sie mit unseren Security-Experten \u2192<\/strong><\/span><\/strong><\/a><\/p>\n                    <\/div>\n        \n    <\/div>\n<\/section>\n<div style=\"height:63px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<section class=\"section email-form\" data-header=\"dark\">\n        <div class=\"container\">\n            <div class=\"email-form-wrapper\">\n                <div class=\"email-form-content refs-form\">\n                                        <h2 class=\"email-form-title\">Join Our Community!<\/h2>\n                                                                                    <div class=\"email-form-description\"><p>Subscribe to our newsletter to receive regular updates, invitations to our events, and exclusive IT insights.<\/p>\n<\/div>\n                                                            \n<div class=\"wpcf7 no-js\" id=\"wpcf7-f4748-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"4748\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/4941#wpcf7-f4748-o1\" method=\"post\" class=\"wpcf7-form init email-form-form\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"4748\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.6\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f4748-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<div class=\"email-form-fields\">\n\t\t<div class=\"email-form-field input-wrap\">\n <span class=\"wpcf7-form-control-wrap\" data-name=\"Email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" autocomplete=\"email\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Email*\" value=\"\" type=\"email\" name=\"Email\" \/><\/span>\n<span id=\"wpcf7-6a6e8a182ce42-wrapper\" class=\"wpcf7-form-control-wrap website_url-wrap\" data-cf7apps-honeypot=\"website_url\" style=\"display: block;\n\t\t    width: 0px;\n\t\t    height: 0px;\n\t\t    padding: 0px;\n\t\t    border: 1px solid transparent;\n\t\t    display: block;\n\t\t    overflow: hidden;\n\t\t    \"><input type=\"hidden\" name=\"website_url-random-hash\" value=\"21231165\"><label\n\t\t    for=\"wpcf7-6a6e8a182ce42-field\"\n\t\t    class=\"hp-message\"\n        >Please leave this field empty.<\/label><input\n\t    id=\"wpcf7-6a6e8a182ce42-field\"\n\t    \n\t    class=\"wpcf7-form-control wpcf7-text\"\n\t    type=\"text\"\n\t    name=\"dsvir1vdhy5n\"\n\t    value=\"\"\n\t    size=\"40\"\n\t    autocomplete=\"new-password\"\n\t    tabindex=\"1000\"\n    \/><\/span>\n\t\t<\/div>\n<input class=\"wpcf7-form-control wpcf7-hidden\" value=\"EN\" type=\"hidden\" name=\"Sprache__c\" \/>\n\t\t<button type=\"submit\" class=\"btn wpcf7-submit btn--grey btn--active\"><span>Subscribe<\/span><i class=\"icon icon-btn-arrow\"><\/i><\/button>\n<\/div>\n\n\n<div class=\"email-form-agreement checkbox-wrap\">\n\t\t\n\t\t<label for=\"Marketing_Opt_In__c\">I would like to receive relevant information about services and events, as well as other content from Manage Now GmbH. I can unsubscribe at any time.<\/label>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"Marketing_Opt_In__c\"><span class=\"wpcf7-form-control wpcf7-checkbox\" id=\"newsletter\"><span class=\"wpcf7-list-item first last\"><input type=\"checkbox\" name=\"Marketing_Opt_In__c[]\" value=\"Yes\" \/><span class=\"wpcf7-list-item-label\">Yes<\/span><\/span><\/span><\/span>\n<\/div>\n\n<div class=\"email-form-agreement checkbox-wrap\">\n\t\t<label for=\"Datenschutz__c\"><span> Manage Now GmbH collects, processes, and uses your above-mentioned personal data to handle your request. Further information can be found in<a href=\"\/en\/data-protection\/\"> our data protection policy*<\/a><\/span><\/label>\n\t\t<span class=\"wpcf7-form-control-wrap\" data-name=\"Datenschutz__c\"><span class=\"wpcf7-form-control wpcf7-checkbox wpcf7-validates-as-required\"><span class=\"wpcf7-list-item first last\"><input type=\"checkbox\" name=\"Datenschutz__c[]\" value=\"agreement\" \/><span class=\"wpcf7-list-item-label\">agreement<\/span><\/span><\/span><\/span>\n\n\n<\/div><input type='hidden' class='wpcf7-pum' value='{\"closepopup\":false,\"closedelay\":0,\"openpopup\":false,\"openpopup_id\":0}' \/><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n<\/section>\n<script>\n    (function ($) {\n        let node_form = $('.refs-form form');\n        if( node_form.length ) {\n            node_form.find('input[type=\"checkbox\"]').each(function () {\n                let parent_node = $(this).parents('.email-form-agreement'),\n                    input_node = $(this),\n                    input_name = input_node.attr('name').replace('[]', ''),\n                    label_node = parent_node.find('label[for=\"' + input_name + '\"]');\n\n                    input_node.attr('name',input_name);\n                    input_node.attr('id',input_name);\n                    input_node.siblings().remove();\n                    input_node.after(label_node);\n            });\n        }\n    })(jQuery)\n<\/script>","protected":false},"excerpt":{"rendered":"","protected":false},"author":7,"featured_media":5009,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_wp_rev_ctl_limit":""},"categories":[69],"arts":[81],"branche":[],"post_folder":[],"class_list":["post-4941","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","arts-managed-security-soc-services"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/posts\/4941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/comments?post=4941"}],"version-history":[{"count":2,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/posts\/4941\/revisions"}],"predecessor-version":[{"id":5234,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/posts\/4941\/revisions\/5234"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/media\/5009"}],"wp:attachment":[{"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/media?parent=4941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/categories?post=4941"},{"taxonomy":"arts","embeddable":true,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/arts?post=4941"},{"taxonomy":"branche","embeddable":true,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/branche?post=4941"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/www.manage-now.de\/en\/wp-json\/wp\/v2\/post_folder?post=4941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}