then 'Add to home screen'
then 'Add to home screen'
Starting March 15, 2026, new SSL certificates will be valid for 200 days — about 7 months — instead of a full year. This is an industry-wide change mandated by the CA/Browser Forum through Ballot SC-081v3, a proposal endorsed by major tech leaders like Apple, Google, and Mozilla. For technology leaders across Africa, this shift marks the end of the “manual era” of digital security.
The Shrinking Security Timeline
The reduction to 200 days is only the first step in a phased rollout intended to make the internet more secure. Technology teams must prepare for an increasingly rapid renewal cycle:
- March 15, 2026: Maximum validity drops to 200 days (about 6.5 months).
- March 15, 2027: Maximum validity drops to 100 days (about 3 months).
- March 15, 2029: Maximum validity hits the final target of 47 days (about 1.5 months).
By 2029, a task that IT teams previously handled once a year will need to occur eight or nine times annually, turning certificate management into a continuous operational cycle.
Why Is This Happening?
The primary goal is enhanced security. Shorter certificate lifespans provide several critical protections:
- Narrowing Exposure: If a security key is stolen or leaked, it becomes invalid much faster, limiting the time an attacker can abuse it.
- Cryptographic Agility: The industry is preparing for the era of Post-Quantum Cryptography. Shorter cycles force organizations to develop the ability to rotate certificates quickly, which will be essential when traditional encryption methods become obsolete around 2030.
- Stronger Validation: Frequent renewals ensure that the identity of the website owner is validated more often, maintaining a higher level of digital trust.
The Risk of the “Manual” Approach
Many African enterprises still rely on manual methods—like spreadsheets, shared inboxes, and calendar reminders—to track expirations. Under a 47-day rule, these processes are almost certain to fail.
When a certificate expires unnoticed, the consequences are immediate: websites and apps stop working, customers see scary “connection is not private” warnings, and internal systems like payment gateways can break instantly. Past incidents at Microsoft, SpaceX, and the Bank of England prove that even tech giants are vulnerable to massive outages caused by a single expired certificate.
The Solution: Automation via ACME
To survive a 47-day future, organizations must move to Automated Certificate Lifecycle Management (CLM). The industry standard for this is the ACME protocol (Automated Certificate Management Environment).
ACME allows your servers to automatically request, install, and renew their own security certificates without human intervention. Moving to this “set-and-forget” model ensures that your business stays online and secure regardless of how short the validity window becomes.
What You Should Do Today
The March 2026 deadline functions as an early warning system. To avoid “certificate firefighting,” leaders should take these proactive steps:
- Build a Complete Inventory: You cannot manage what you cannot see. Use network discovery tools to find every certificate across your production, staging, and internal systems.
- Define Explicit Ownership: Assign clear accountability between Security, IT, and DevOps teams to ensure no certificate falls through the cracks.
- Start Automating Now: Don’t wait for 2029. Begin adopting ACME-enabled solutions in low-risk environments (like staging or internal APIs) today to refine your workflows before the 200-day pressure begins.
