The CA / B Forum, the SSL industry regulator, has adopted new Ballot SC33 by a majority vote. As the proposal suggests, the method for verifying domain ownership in 3.2.2.4.10 (using random numbers) is now deprecated.

The Sectigo Certification Authority announced the termination of the issue of two-year SSL certificates. From 19 August 2020, Sectigo will only offer one-year public SSL / TLS certificates (valid up to 398 days). This is due to the decision of major browsers to stop trusting two-year certificates.

Starting 1 September 2020, Mozilla will no longer trust SSL certificates issued for more than 1 year (only certificates with a period of 398 days or less will be trusted). This decision does not come as a surprise because many major browsers have already supported this initiative.

From 1 September 2020, all CAs must stop issuing two-year SSL / TLS certificates. The maximum validity period for SSL certificates is now 1 year (398 days to be precise).

Dean Coclin, chairman of the CA/Browser Forum, has posted on Twitter the announcement that Google will follow Apple's lead in limiting the validity of public SSL/TLS certificates to one year. This decision was not a surprise, since Google has always been the main supporter of short-lived certificates.