Reference Source

ZeroSSL

For ZeroSSL, profile or product is Annual; maximum validity (days) is 200; effective date of current limit is 2026-03-15; still issuing tls certificates is yes; notes is Annual certificates provide one year of coverage through multiple certificate issuances; every new certificate follows the 200-day limit and requires a mid-term reissuance to cover the full 1-year period. ZeroSSL no longer offers single 1-year certificate issuances, recorded from its source on 2026-08-18.

Certificate Authority
ZeroSSL verified
Profile or Product
Annual our reading
Maximum validity (days)
200 verified
Effective date of current limit
2026-03-15 our reading
Still issuing TLS certificates
yes our reading
Notes
Annual certificates provide one year of coverage through multiple certificate issuances; every new certificate follows the 200-day limit and requires a mid-term reissuance to cover the full 1-year period. ZeroSSL no longer offers single 1-year certificate issuances. our reading
Sourcehelp.zerossl.com
Verified
Review by
DatasetTLS certificate maximum validity by Certificate Authority: what each CA actually issues today

Values marked our reading are our classification of what the source says — the source does not print them in those words. The quote below is the evidence for each one; judge it yourself.

What the source says

Starting March 15, 2026, SSL/TLS certificates can be issued for a maximum of 200 days . This reflects a shift from the previous 1‑year validity model to a shorter, more secure lifecycle.

help.zerossl.com, retrieved 2026-08-18

Sources disagree

More than one authority states this, and they do not state the same thing. Both are reproduced with the source each came from — deciding between them is yours, not ours.

Profile or Product

help.zerossl.com says profile or product is Annual, as of 2026-08-18.

Starting March 15, 2026, SSL/TLS certificates can be issued for a maximum of 200 days . This reflects a shift from the previous 1‑year validity model to a shorter, more secure lifecycle.

https://help.zerossl.com/hc/en-us/articles/34330849350173-SSL-TLS-Certificate-Validity-Changes-New-200-Day-Limit-Explained

zerossl.com says profile or product is ACME/free, as of 2026-08-18.

ACME integrations let you order and renew 90-day certificates automatically and free of charge, using any major ACME client:

https://zerossl.com/features/acme/

Maximum validity (days)

help.zerossl.com says maximum validity (days) is 200, as of 2026-08-18.

Starting March 15, 2026, SSL/TLS certificates can be issued for a maximum of 200 days . This reflects a shift from the previous 1‑year validity model to a shorter, more secure lifecycle.

https://help.zerossl.com/hc/en-us/articles/34330849350173-SSL-TLS-Certificate-Validity-Changes-New-200-Day-Limit-Explained

zerossl.com says maximum validity (days) is 90, as of 2026-08-18.

ACME integrations let you order and renew 90-day certificates automatically and free of charge, using any major ACME client:

https://zerossl.com/features/acme/

Notes

help.zerossl.com says notes is Annual certificates provide one year of coverage through multiple certificate issuances; every new certificate follows the 200-day limit and requires a mid-term reissuance to cover the full 1-year period. ZeroSSL no longer offers single 1-year certificate issuances., as of 2026-08-18.

Starting March 15, 2026, SSL/TLS certificates can be issued for a maximum of 200 days . This reflects a shift from the previous 1‑year validity model to a shorter, more secure lifecycle.

https://help.zerossl.com/hc/en-us/articles/34330849350173-SSL-TLS-Certificate-Validity-Changes-New-200-Day-Limit-Explained

zerossl.com says notes is Free ACME-issued certificates are 90 days, renewable automatically with any major ACME client., as of 2026-08-18.

ACME integrations let you order and renew 90-day certificates automatically and free of charge, using any major ACME client:

https://zerossl.com/features/acme/

Sources

Last verified against source: . Due for re-check by . This page as Markdown · OKF bundle · full dataset as JSON.