Information Regarding SSL Certificate Validity Periods and Verification Standards

Dear Customer, Please Note:

We would like to inform you about an upcoming change and how it will affect your certificate management processes.

Starting February 24, 2026, the maximum validity period for all TLS/SSL certificates (including EU QWAC and QWAC PSD2 certificates) issued through the DigiCert infrastructure will be reduced from 397 days to 199 days (approximately 7 months).

This transition to a shorter validity period is a mandatory requirement implemented across the industry, in line with new core requirements defined by the CA/Browser Forum (Certificate Authorities and Browsers Forum). The aim of this change is to enhance security, limit the impact of potential key disclosures, and enable faster implementation of cryptographic updates as threats and standards change.

While this change may require adjustments, it will help your systems remain more resilient over time by mitigating risks. At TurknetHost, we are working to ensure your renewal processes run smoothly.

The effects of this change on your certificate environment are summarized below:
Impact on Certificates
• Ordering Process: Until February 24, 2026, you can continue to order TLS/SSL certificates with a validity period longer than 199 days (e.g., 1 year).
• New Issues: All certificates issued on or after February 24 will be limited to a maximum of 199 days, even if a longer period was requested in your order.
• Pending Requests: Pending requests processed on or after February 24 will be reduced to a 199-day validity period, regardless of order details.
• Recommendation: If you need longer-term (1-year) certificates, we recommend placing your orders before February 24, 2026, and ensuring your domain/organization validations are up-to-date to avoid delays.
• Existing Certificates: Certificates that are currently active will not be affected by this change. Certificates obtained before February 24th will remain valid until their original expiration dates.
• Reissue: As an important note; if a certificate is reissued on or after February 24th, the new certificate will be limited to 199 days, even if your original certificate has a longer validity period.
Impact on Organization and Domain Validation
• Organization Validation (OV): As of February 24th, OV organization validation reuse periods will be reduced from 825 days to 397 days. • Domain Validation (DV): As of February 24th, domain validation reuse periods will be reduced from 397 days to 199 days. If you have any questions about this, you can contact us by logging in to your account at https://www.turknethost.com/hesabim/destek-taleplerim and creating a support request.