What the schedule is
Under CA/Browser Forum Ballot SC-081v3, the maximum validity of publicly trusted TLS certificates drops from 398 to 200 days on 15 March 2026, to 100 days on 15 March 2027, and to 47 days on 15 March 2029. This tool compares your certificate's actual lifetime with each step and shows how many renewals per year each limit implies.
Why a lifetime check isn't the whole story
At 47 days a team renews about eight times a year, so any manual step in the process will eventually be missed. Fixed reminders such as '30 days before expiry' also fire on nearly every renewal cycle and get ignored. Alerting on a failed renewal is what stays meaningful.