Beginning March 15, 2027, the maximum life cycle for publicly trusted Secure Sockets Layer (SSL) certificates will fall from 200 days to 100 days. Six months after the first validity reduction in March 2026, CSC analyzed approximately 246,100 certificates across Forbes Global 2000 core domains. The findings suggest that many enterprises have yet to experience the full operational impact of shorter certificate life cycles.
In the months leading up to March 2027 reduction, enterprises will soon realize that this change will require more than just tracking the number of days on a certificate. Beyond setting new timelines, operating models must be ready to keep pace with shorter renewal cycles.
Many enterprises have yet to feel the full renewal impact
The transition to shorter certificate life cycles is already underway, but its operational impact hasn’t necessarily reached every organization.
Research published in our report The SSL Landscape: Six-Month Checkpoint suggests this is true even among the world’s largest companies. Around 41% of the Forbes Global 2000 certificates analyzed still had one-year life cycles. At the September 15, 2026, checkpoint, 31% of those certificates were due for renewal and moved to a maximum life cycle of 200 days—requiring renewal twice a year.
This makes the coming months particularly crucial. As more legacy certificates reach expiry, a greater proportion of enterprise portfolios will begin operating on shorter renewal cycles. This raises the stakes of missed deadlines, as an expired certificate can disrupt websites and applications, with potential consequences for revenue, reputation, and trust.
Moving from 200-day to 100-day SSL certificates would then mean increasing the frequency of certificate discovery, validation, issuance, installation, and monitoring. On top of that, executives will also need to ensure processes can scale without adding manual bottlenecks.
Certificate scale and provider sprawl raise the operational test
Renewal frequency is only the beginning. The size and complexity of enterprise certificate portfolios create an additional management challenge.
CSC’s research found that 58.6% of Forbes 2000 companies had more than 10 certificates on their main domain, while roughly one in five had more than 100. A small number were managing more than 15,000 certificates each.
At the same time, certificate management remains fragmented. Only 24.2% of analyzed companies used a single provider on their main domain, while 55.8% used three or more providers. That can mean different portals, renewal schedules, notification processes, and workflows operating across the same organization.
As certificate life cycles become shorter, those separate processes need to operate at greater frequency.
What does readiness for 100-day SSL certificates look like?
The six-month checkpoint presents new challenges. Enterprises manage sizeable certificate portfolios, yet continue to work with multiple providers where fragmentation increases complexity.
The window between now and March 15, 2027, will become an important stress test for enterprise certificate management. Greater visibility over certificate inventories, standardized processes, and certificate automation can reduce the reliance on manual workflows as renewal volumes increase.
See the full findings in The SSL Landscape: Six-Month Checkpoint.
