New Code Signing Certificate Validity Rules. Shortened Lifespan and Implications
In October 2025, the CA/Browser Forum approved a change aimed at limiting the maximum validity period of publicly trusted Code Signing certificates from the current 39 months to 460 days (approximately 15 months). This change will take effect on March 1, 2026 and has critical implications for software supply chain security (Software Supply Chain Security).