Readiness check · Harden lane · weight 3

Certificate lifetime of 100 days or less

The certificate's total validity period is 100 days or less, which usually means renewal is automated.

Observed on: 67%
Top 1K sites: 50%
Top 1M band: 82%
Not measured: 865

Why it matters

Under CA/Browser Forum Ballot SC-081v3, the maximum lifetime of public TLS certificates fell to 200 days on 15 March 2026 and falls to 100 days on 15 March 2027 and 47 days on 15 March 2029. Sites that renew by hand will need to renew far more often.

How to fix it

Move to automated issuance and renewal now, while you still have time to test it.

How we check

The certificate's total validity period is 100 days or less, which usually means renewal is automated.

Observed: Certificate lifetime was 100 days or less.

Not observed: Certificate lifetime was longer than 100 days.

Limit: Certificate and protocol were observed from one vantage point; CDNs can present different certificates by region.

By popularity band

Chrome UX Report band	Observed	Measured
Top 1K	50%	469
Top 5K	56%	2,093
Top 10K	57%	2,481
Top 50K	64%	18,312
Top 100K	65%	5,152
Top 500K	73%	5,252
Top 1M	82%	5,471

Categories most likely to do this

Categories least likely

By stack

By provider

Popular sites where we observed this

Sources and guides

Guide: HTTPS and TLS Guide for Website Owners Check your own site