The CA/Browser Forum is reducing maximum TLS certificate lifetimes in phases: 200 days starting March 15, 2026, then 100 days in 2027, and 47 days by 2029. Heroku users on Automated Certificate Management (ACM) are unaffected, but those manually uploading certificates must plan for more frequent renewals and updated processes. Switching to Heroku ACM is recommended as it handles renewals automatically at no extra cost.
Table of contents
Industry shift towards shorter certificate lifetimesWhy this is happeningRecommended actions for manual certificate usersAutomating certificate renewals with Heroku ACMHave questions about certificate management?1.3K Impressions