The 47-Day SSL Certificate Rule: What It Means for Your Website
In This Article:
- ✓ Maximum SSL certificate validity is being phased down industry-wide
- ✓ 2029 deadline: certificates last just 47 days
- ✓ How to stay covered without extra work
If you manage a website in the Philippines, you may have noticed your SSL certificate needing renewal more often than it used to. That's not a mistake on your host's part — it's an industry-wide security upgrade. In 2025, the CA/Browser Forum, the group whose standards browsers like Chrome, Safari, and Edge follow for trusting websites, approved a phased schedule that shortens how long a public SSL/TLS certificate can stay valid: 200 days starting March 2026, 100 days from March 2027, and eventually just 47 days by March 2029.
For most small business owners, this sounds more alarming than it needs to be. Z.com PH Web Hosting, WordPress Hosting, and Business Hosting plans include a free SSL certificate — check your hosting dashboard or ask Z.com PH support to confirm whether automatic renewal is enabled for your account. This guide explains what actually changed, why browsers pushed for it, and the habits that help keep your site trusted through every renewal ahead.
Quick Answer: A CA/Browser Forum-approved rule is shortening how long public SSL certificates can stay valid — 200 days from March 2026, 100 days from March 2027, and 47 days by March 2029. Each limit applies to certificates issued on or after its effective date, including renewals and reissues; existing certificates aren't shortened retroactively. Z.com PH Web Hosting, WordPress Hosting, and Business Hosting plans include a free SSL certificate — confirm automatic renewal in your dashboard or with support, and periodically check that your browser reports the connection as secure.
Table of contents
What the 47-Day Rule Actually Changed
A publicly trusted SSL/TLS certificate is the small file that lets a browser show "https://" and report your connection as secure. It proves to a visitor's browser that your site is who it says it is and that the connection is encrypted. Historically, these certificates could stay valid for up to a year or more. In April 2025, Apple proposed shortening that window, and in May 2025 the CA/Browser Forum approved a phased reduction instead of a single overnight change: CA/Browser Forum Ballot SC-081v3.
The rollout happens in three steps. Each maximum-validity limit applies to publicly trusted TLS certificates issued on or after the relevant effective date, including renewals and reissues after that date — certificates already in use are not shortened retroactively:
| Effective Date | Maximum Certificate Validity | What Changes for You |
|---|---|---|
| From March 15, 2026 | Up to 200 days | Renewals happen roughly every 6–7 months instead of yearly |
| From March 15, 2027 | Up to 100 days | Renewals happen about every 3 months |
| From March 15, 2029 | 47 days | Renewals happen roughly every 6–7 weeks |
Nothing about this changes what a certificate does or how much protection it offers by itself. It only changes how often a new one is issued to replace the old one.
SC-081v3 also shortens how long certificate authorities can reuse previously validated domain and IP data before re-verifying it. This mainly affects certificate authorities and organizations managing their own certificate lifecycle — it adds no extra step for most Z.com PH hosting customers.
Last verified: August 26, 2026 against CA/Browser Forum Ballot SC-081v3. Future ballots may change later milestones.
Why Browsers Are Shortening Certificate Life
A certificate that stays valid for a long time is also a longer window of risk if it was ever mis-issued or if its private key is ever compromised. Shorter validity periods limit how long a problem certificate can stay trusted before it naturally expires and gets replaced. The change also pushes the entire hosting industry toward automated renewal — since manually reissuing a certificate every 47 days by hand isn't realistic for most businesses, hosts and certificate authorities are expected to make automatic renewal the default rather than the exception.
For a Filipino online seller running a store on Shopee, Lazada, or their own WordPress site, the practical result is the same either way: a site with HTTPS that customers can trust, now backed by a security standard that closes gaps faster than before.
What Happens If a Certificate Lapses
If a certificate isn't renewed in time, visitors don't see a slow site — they see a warning. Chrome shows "Your connection is not private," and other browsers show similar alerts before a visitor can even reach the page. Most people close the tab rather than click through, and for a business running a sale, that can mean losing checkouts at the exact moment traffic from Facebook or Messenger is highest. The good news is that HTTPS access typically recovers once a valid certificate is issued, installed, and served correctly — timing varies with certificate type, validation, DNS, and server setup. The harder part to recover is the lost trust and abandoned visits during the gap, especially for shoppers checking out with GCash or a card who expect a secure connection to simply be there.
Common misconception: Assuming a longer certificate automatically means a safer certificate. Validity length alone doesn't determine TLS cipher strength — certificates with the same TLS configuration give equivalent in-transit encryption regardless of validity period. Shorter validity instead improves lifecycle security, limiting how long a stale, misissued, or compromised certificate can stay trusted.
Common mistake: Tracking renewal dates by memory or a sticky note instead of confirming automatic renewal is actually turned on with your host or certificate provider.
Common mistake: Waiting for a browser warning to appear before checking on your certificate, rather than using automated HTTPS or certificate-expiry monitoring with alerts set well before expiry — especially important as validity periods shrink toward 47 days.
How to Stay Ahead Without Extra Work
Check Who Renews Your Certificate Today
Start by finding out whether your current SSL certificate renews itself or needs to be manually reissued. If your website runs on a Z.com PH Web Hosting, WordPress Hosting, or Business Hosting plan, a free SSL certificate is included — confirm in your hosting dashboard or with Z.com PH support whether automatic renewal is active for your account. If you're not sure how your certificate is managed, your hosting provider's dashboard or support team can confirm it in a few minutes.
Turn On Automatic Renewal Where You Can
If you or a developer manage a certificate separately from your hosting plan — through a standalone certificate authority, for example — this is a good moment to switch on automatic renewal if it isn't already active. As validity periods shrink toward 47 days, manual reissuing simply has to happen more often, and automation is the difference between a non-event and a scramble. If you're comparing or replacing a standalone certificate, Z.com PH's GlobalSign SSL certificates page outlines DV, OV, EV, and wildcard options. Manual workflows need to be automated, or backed by reliable expiry monitoring, well before the 47-day maximum takes effect in 2029.
- Confirm your site loads with https:// and that your browser's connection or site-information panel reports it as secure, not a warning
- Check whether your certificate renews automatically or needs manual reissue
- Note your certificate's current expiry date somewhere you'll actually see it
- Confirm your web hosting plan includes a free SSL certificate
- Set up automated HTTPS or certificate-expiry monitoring with alerts before expiry — don't rely on an annual check alone as validity periods shrink
Key takeaway: The 47-day rule is a browser-industry security upgrade, not a Z.com policy or an extra fee. If your certificate already renews automatically, shorter validity periods are simply something that happens more often in the background.
Frequently Asked Questions
What is the 47-day SSL certificate rule?
It's a phased rule from the CA/Browser Forum, the group whose standards Apple, Google, Mozilla, and Microsoft all follow for trusting websites in their browsers. It gradually shortens how long a publicly trusted SSL/TLS certificate can stay valid: up to 200 days starting March 2026, 100 days from March 2027, and 47 days from March 2029. It applies to the certificate that secures a website with HTTPS, not to domain names or hosting accounts themselves.
Do I need to do anything about this right now?
Only if you handle SSL renewal manually. If your certificate already renews automatically, the shorter validity periods happen in the background with no extra action needed from you. Z.com PH Web Hosting, WordPress Hosting, and Business Hosting plans include a free SSL certificate — confirm automatic renewal is enabled via your hosting dashboard or Z.com PH support, then check your site still shows a secure HTTPS connection next time you visit.
Will shorter certificates cost more money?
Not on their own. A certificate's price is set by its issuer and type, not by how many days it stays valid for. Z.com PH's included Web Hosting SSL certificate carries no separate renewal fee under current plans; confirm current terms with support if you need written confirmation. The real cost some businesses may face is time, since manual renewal simply has to happen more often as the schedule shortens, which is exactly what automation is meant to remove.
What happens if my certificate expires by mistake?
Visitors see a browser warning, such as "Not Secure" or "Your connection is not private," before they can reach your site, and most will leave rather than click through. For an online store, this can happen in the middle of checkout. HTTPS typically comes back once a valid certificate is issued, installed, and served correctly — the exact timing depends on your certificate type and setup — but the lost visits and trust during the gap are harder to recover.
Does Z.com's free SSL certificate already handle this for me?
Every Z.com PH Web Hosting plan includes a free SSL certificate. As validity periods shorten from 200 days to 100 and eventually 47, confirm in your hosting dashboard or with Z.com PH support that automatic renewal is active for your account so renewal keeps happening in the background without you needing to reissue or reinstall anything. If you manage a certificate through a separate provider outside your hosting plan, confirm with that provider whether their renewal is automatic.
SSL certificates are quietly becoming one of the most frequently renewed parts of running a website, but that's a sign of the web getting more secure, not more complicated for the businesses that rely on it. The practical takeaway is simple: confirm today whether your certificate renews itself — through your hosting dashboard or your host's support team — and if it does, the schedule shortening to 47 days by 2029 shouldn't require extra effort from you. A domain paired with hosting that includes a free SSL certificate — the kind many WordPress Hosting customers already have — means one less thing to track as browser security standards continue to evolve.
Get web hosting that includes a free SSL certificate, so shorter validity periods are easier to manage without extra cost.
View Hosting Plans