What is causing the shift to 47-day SSL certificates? Q-day is used in the cyber security community referring to when quantum computers become powerful enough to decrypt widely used algorithms such as RSA and ECC.
SSL certificates are used by websites to protect against threat actors accessing the website’s data. Without an SSL certificate it is like sending a postcard anyone can view it; with an SSL certificate the information is like sending it in a sealed envelope.
SSL certificates rely on algorithms such as RSA and ECC for their cryptographic security.
To get ahead of this impending threat, SSL certificates are being shortened by this timeline. With the end result being 47-day SSL certificates.
16th March 2026
From 380 days to 200 days
March 2027
From 200 days to 100 days
March 2029
From 100 days to 47 days
Benefits of Shorter SSL Certificates
Faster Adoption and Stronger Cryptology
- Shorter lifetimes force organisations to renew certificates more frequently.
- This accelerates the transition to newer, more secure algorithms crucial as we move toward post‑quantum cryptography.
Reduced Exposure if a Key is Compromised
- If a private key is stolen, the attacker can only exploit it until the certificate expires.
- Shorter validity windows shrink the attacker’s opportunity.
Limits Long‑Term Risk from Weak or Deprecated Algorithms
- Cryptographic standards evolve. Shorter certificates ensure outdated algorithms don’t linger on the internet for years.
- This is especially important with the looming threat of quantum decryption.
Improved Certificate Hygiene
- Organisations are encouraged to maintain better certificate management practices.
- Reduces the number of forgotten, expired, or misconfigured certificates that can break services or create vulnerabilities.
Less Impact from Mis‑Issued Certificates
- If a Certificate Authority (CA) accidentally issues a certificate incorrectly, the damage window is much smaller.
- Shorter lifetimes reduce the need for emergency revocation events.
Better Alignment with Modern Security Standards
- Browsers and industry groups (like CA/Browser Forum) increasingly push for shorter validity to keep the ecosystem secure and agile.
- This aligns with zero‑trust principles and continuous validation.
Harvesting Certificate Numbers
Another reason to act now is that threat actors are harvesting SSL certificate numbers to hack them when Q-day arrives. Giving even more reason to start refreshing them now rather than later.