Update: SSL Certificate Expiration Dates are Changing
Starting March 15, 2026, publicly trusted SSL/TLS certificates will be limited to a maximum validity of 200 days, marking the start of a phased reduction under industry approved Certificate Authority/Browser (CA/B) Forum requirements adopted by major browsers and certificate authorities. Certificate lifetimes will be reduced as follows:
- March 15, 2026: 200 days
- March 15, 2027: 100 days
- March 15, 2029: 47 days
Please note that if you have a current SSL/TLS certificate, it will expire after the validity timeframe it was issued under (395 days). Any new certificates issued after March 15 will expire on the new validity period (200 days).
OIT Security has an active project underway to deliver certificate automation solutions to campus in the next few months and will reach out directly to those with registered certificates as automated solutions become available
The CU Boulder IdentiKey that is used to login will be identified as the technical contact for the certificate. All updates and renewal notifications from the Office of Information Security (OIS) will be directed towards this contact.
Features
- Access the Request an SSL Certificate form from on-campus (through VPN or on campus IPs, including wireless) to request a Sectigo SSL certificate.
- The form will create a ServiceNow request so we can automate the server vetting and scanning process.
Benefits
- Meets CU Boulder security standards.
- You will receive renewal and update notifications.
- Online request form streamlines the process.
Who can get it
- This service is available to anyone with a CU Boulder IdentiKey.
How to get it
- Certificates can be requested by filling out the Request an SSL Certificate form.
- IdentiKey required.
Cost
- The SSL certificates service, including the Request an SSL Certificate form, is provided as a common-good to the campus which means there is no direct cost to you or your department.
Sectigo Documentation and Support Resources
- SSL Certificates FAQ
- Sectigo Knowledge Base
- Certificate Installation: Microsoft IIS 7.x
- Certificate Installation: Apache & mod_ssl
- Sectigo Docs
- CSR Decoder
- Sectigo Platform Status