47-Day Validity Readiness Dashboard¶

The 47-Day Validity Readiness Dashboard helps you prepare for upcoming certificate renewal surges resulting from the CA/Browser Forum’s new TLS Baseline Requirements. This dashboard visualizes the impact of those changes, projects renewal volumes, and recommends next steps for automation.

The Dashboard displays a variety of certificate insights. Click All Active Certificates at the top of the dashboard and select one of the following filters:

• All Active Certificates
• Active Public Certificates
• Active Non-Public Certificates

Purpose¶

The dashboard provides visibility into:

• How certificate lifespans will change by mandate deadline
• When those mandates take effect
• How many certificates you’ll need to renew and when
• How to reduce operational risk through early preparation and automation

Dashboard widgets and features¶

The 47-Day Validity Readiness Dashboard offers various insights into your certificate validity readiness. Refer to the following subsections to learn more about these insights:

Why certificate lifespans are shortening¶

This section outlines the background behind the CA/B Forum’s phased reductions in TLS certificate validity. It includes:

• Current validity: 398 days
• Phase 1 (March 15, 2026): 200 days
• Phase 2 (March 15, 2027): 100 days
• Phase 3 (March 15, 2029): 47 days

Mandate deadline¶

Displays a countdown to each mandate phase:

Use this information to prioritize migration efforts and policy changes.

Renewal impact projection (Phase 1)¶

This section highlights the total certificates projected to be affected by the upcoming 200-day limit in Phase 1:

• After Phase 1: Over 200 Days
• After Phase 1: 200 days or less
• Renewing before Phase 1

This breakdown helps identify which certificates are non-compliant under the upcoming rules.

Projected certificate renewals (2025–2029)¶

Forecasts how many certificates will need renewal each year based on your current inventory and the phased CAB requirements:

Phase-specific bands in the chart visually separate how each CAB requirement phase will affect renewal frequency.

Top CAs with certificates impacted by Phase 1¶

Highlights the certificate authorities (CAs) with certificates exceeding Phase 1 validity impact. If no data is displayed, it means none of your currently inventoried certificates from public CAs will be out of compliance during Phase 1.

Active issuing templates that need validity changes¶

This section identifies issuing templates that are out of alignment with the upcoming CA/Browser Forum certificate lifespan mandates. Templates are ranked by the number of certificates they issue, helping you prioritize updates.

Select any of the following filters above the chart to view templates with certificates in different validity ranges:

• Over 200 days
• 100–199 days
• 48–99 days