Certificate failures can cost firms over $250,000
DigiCert survey finds certificate failures cost firms over $250,000 per incident, with 47-day TLS certificates set to multiply management workloads by 2029.
DigiCert's Certificate Management Outlook reports that 34% of companies experienced outages from expired certificates and 40% from mismanagement, with nearly one in four citing incidents costing over $250,000. The CA/Browser Forum's move to 47-day certificate lifespans by 2029 will require renewals eight times more often and 40 times as many domain validations. Over half of organizations manage more than 1,000 certificates, yet only 10% have automation in place, with budget constraints and legacy systems cited as key barriers.
AWS Certificate Manager sets 2027 end date for email-validated certificate renewals
AWS Certificate Manager will phase out email validation for public certificates during 2027, requiring migration to DNS validation before September 30, 2027.
AWS Certificate Manager will stop offering email validation in new Regions on January 1, 2027, discontinue it for new certificate requests on March 31, 2027, and stop renewing email-validated certificates on September 30, 2027. This precedes the CA/Browser Forum's March 15, 2028 deadline ending email-based domain validation for publicly trusted certificates. AWS is updating the UpdateCertificateOptions API so customers can switch to DNS validation in place while retaining the certificate ARN, with Route 53 support for creating required CNAME records.