Knowledge is good when shared!

Dear Customers,

Based on information received from our partner Asseco Data Systems S.A. (Certum), we would like to draw

your attention to important upcoming changes affecting Certum-issued certificates.

DNS and CAA Verification

DNSSEC validation has been introduced into the system, and detailed error messages will now be displayed

during CAA and DNS-based verification processes.

Separation of Product Validity and Certificate Validity

Going forward, the product validity period and the certificate validity period will be treated separately. The

practical implications are as follows:

Code Signing Certificates

• Product validity remains 1, 2, or 3 years.
• However, the maximum certificate validity is now limited to 459 days.
• This change takes effect on 27 February 2026 (Friday).

SSL Certificates

• Product validity remains 1 year.
• However, the maximum certificate validity is now limited to 199 days.
• This change takes effect on 13 March 2026 (Friday).

Important: If a certificate expires before the end of the product validity period, a reissue will be requiredin order to utilize the remaining product validity.