cert-governance · severity low

Certificate lifetime

Share of certificates issued for longer than the 47-day maximum lifetime.

Measured every Saturday · last updated

How it is measured

Tier 1. Validity window of the serving certificate. Denominator: has_web.

Why it matters

The CA/Browser Forum is phasing certificate lifetimes down to 47 days. Any domain still on long-lived certificates has a manual renewal process that is about to break several times a year — a deadline-driven quiet failure that has not fired yet.

The base rate

Two independent populations. The global, domain-anchored figure is unbiased; the company-anchored figures are built by matching company names to domains and skew toward more digitally-mature firms. Both are published, so the gap is visible.

Global (all domains) 13.51% fail · n=13,462
short_lived_ready: 86.49%long_lived: 13.51%
France companies 22.62% fail · n=535
short_lived_ready: 77.38%long_lived: 22.62%
UK companies 29.27% fail · n=1,944
short_lived_ready: 70.73%long_lived: 29.27%
Norway companies 10.61% fail · n=782
short_lived_ready: 89.39%long_lived: 10.61%
short_lived_ready · 89.39%long_lived · 10.61%

By company size band

Company-anchored cuts (national registries with a size proxy), split by size band. Right-hand figure is the share not meeting the control.

France
micron=144
short_lived_ready: 79.17%long_lived: 20.83%
20.83%
smalln=160
short_lived_ready: 84.38%long_lived: 15.62%
15.62%
mediumn=124
short_lived_ready: 75%long_lived: 25%
25%
largen=107
short_lived_ready: 67.29%long_lived: 32.71%
32.71%
UK
micron=184
short_lived_ready: 72.83%long_lived: 27.17%
27.17%
smalln=722
short_lived_ready: 69.94%long_lived: 30.06%
30.06%
medium/largen=736
short_lived_ready: 70.65%long_lived: 29.35%
29.35%
dormantn=147
short_lived_ready: 73.47%long_lived: 26.53%
26.53%
no-accountsn=155
short_lived_ready: 69.68%long_lived: 30.32%
30.32%
Norway
micron=226
short_lived_ready: 92.04%long_lived: 7.96%
7.96%
smalln=198
short_lived_ready: 93.94%long_lived: 6.06%
6.06%
mediumn=218
short_lived_ready: 87.61%long_lived: 12.39%
12.39%
largen=140
short_lived_ready: 81.43%long_lived: 18.57%
18.57%

Every segment

Pick one to see the citable answer for a company like yours, with its trend and methodology.

Show the remaining 61 segments

From the newsletter

Where this base rate turned up as a real, fixable exposure.

Slices below 100 measured members are withheld rather than shown with a wide interval — an absent country or issuer means too little data, not zero failures. Licensed CC BY 4.0. Machine-readable data per segment: append .json or .csv to its URL.