Code Signing Certificate Validity Changes: What This Means For You

Certificate lifespans are a hot topic with both Apple and Google proposing to reduce the validity period of SSL / TLS certificates, which is still very much in discussion. But it’s not just SSL / TLS being impacted, Code Signing certificates are seeing similar trends.

Initiated by the Certificate Authority Browser Forum (CA/B Forum), the maximum validity period for Code Signing Certificates will be reduced from 39 months to 460 days. 

What is Changing? 

From the 15th June 2025, the CA/B Forum has directed that the maximum validity period for a Code Signing Certificate will be reduced from 39 months to 460 days. 

Why is This Shift Happening?

This new directive is being introduced by the CA/B Forum as part of their best practice guidelines aimed at enhancing the security of digital certificates. By reducing the lifespan of certificates, the intent is to limit potential exposure to vulnerabilities that could arise from outdated or compromised certificates. As a Certificate Authority, we are adopting this change in accordance with the industry standards set by the CA/B Forum.

Whilst reduced lifespans do mean more frequent renewals, short lived certificates do have considerable benefits:  

  1. Enhanced Security: Shorter validity periods allow for quicker updates and revocations of certificates, minimizing potential risks to your software and users.  
  2. Streamlined Compliance: Shorter periods ensure your certificates reflect the latest security standards, keeping your software aligned with industry best practices. Additionally, more frequent renewals help you stay ahead of compliance requirements, reducing the risk of non-compliance.

NOTE:: This article  is copyright by globalsign.com and we are using it for educational or Information purpose only

Click Here to visit the official store of GlobalSign SSL Certificates in Pakistan