Mega SSL Store

Subscription vs Certificate Validity

Why your certificate validity is shorter than your subscription period, and what you need to do.

The Key Concept

When you purchase an SSL certificate for 1, 2, or 3 years, your subscription covers the full period you paid for. However, the certificate itself is issued for a shorter validity period, as mandated by the CA/Browser Forum and industry regulations.

This means you'll need to reissue your certificate periodically throughout your subscription. Reissuing is free and can be done from your certificate details page. Your subscription ensures continuous coverage for the entire period you purchased.

Industry Timeline

The CA/Browser Forum has approved a phased reduction of maximum certificate validity periods:

Before March 2026
398 days (~13 months)
March 2026 (current)
200 days (~6 months)
March 2027
100 days (~3 months)
March 2029
47 days (~6 weeks)

Renewal vs Reissue

🔄

Renewal

Purchasing a new subscription when your current one expires. You'll place a new order and go through the full setup process again.

♻️

Reissue

Getting a new certificate within your existing subscription — at no extra cost. Same product, new validity period. Required periodically due to industry regulations.

When to Reissue

  • Your certificate is approaching its expiry date (a reissue window opens 30 days before expiry).
  • You lost your private key or it was compromised.
  • You need to change the domain name or add/remove SANs.
  • Your certificate validity is shorter than your subscription (due to industry regulations).
✅

Reissuing is always free and included in your subscription. You can reissue as many times as needed.

How to Reissue

  1. 1Go to your certificate details page and click Reissue.
  2. 2Generate a new CSR or provide your own. You can change the domain if needed — but be aware that changing the domain will immediately revoke the current certificate.
  3. 3Choose a domain validation method (email, HTTP, or DNS).
  4. 4Complete domain validation.
  5. 5Your new certificate will be issued. Install it on your server to replace the old one.
⚠️

Don't confuse renewal with reissue: renewal is a new purchase, reissue is a free replacement within your existing subscription.