Shorter lifetime of TLS / SSL certificates
From September 2020, Apple will introduce a stricter lifetime regime on TLS / SSL certificates. This means that Buypass TLS / SSL certificates issued from September 1st 2020 will have a maximum lifetime of 13 months (398 days). 2-year certificates ordered and issued before this date will be valid for 2 years.
The demand from Apple does not come as a surprise, and we expect the other browser providers to look at similar measures. Shorter service life of TLS / SSL certificates is due to a stronger focus on security in the industry, and will contribute to faster replacement of outdated technology (eg weak algorithms) and more accurate information in the certificates.
As the issuer of TLS / SSL certificates, we adapt to the requirement, in the same way as other certificate issuers (CAs), and reduce the lifetime of our TLS / SSL certificates issued from September 1st 2020 to a maximum of 13 months.
Until September, you can buy a certificate with a 2-year lifetime
The change has no retroactive effect. This means that you still have the opportunity to order certificates with a 2-year lifetime. Please note that certificates with a 2-year lifetime must be ordered AND issued from Buypass before September 1st 2020. It is therefore very important that such an order is made in good time. The last deadline for ordering is August 24th 2020.
Business certificates are not affected
Apple's requirement affects TLS / SSL certificates, including Qualified Website Authentication Certificate (QWAC / PSD2). Business certificates and qualified eSegl certificates are not affected by Apple's requirement.
Life cycle services and automation
We understand that the requirement will affect you as users and administrators in relation to more frequent replacement of certificates. For us, automation will be an important key word to make future certificate management easier. We are also planning several changes in services for ordering and lifecycle management of our TLS / SSL certificates.
Read more on the Mozilla Security Blog.
If you have any questions, feel free to contact us.
You can find more information about Buypass TLS / SSL certificates at www.buypass.com/products/tls-ssl-certificates.