TLS Certificate Lifespan Changes
Salesforce has announced upcoming changes to Transport Layer Security (TLS) certificate lifespans, in alignment with evolving industry standards defined by the Certification Authority Browser Forum (CA/BF).
This notice explains what is changing and how it applies to Simploud.
What’s Changing
Salesforce will enforce shorter maximum lifespans for new TLS certificates issued by public Certificate Authorities (CAs) according to the following timeline:
- Until March 15, 2026: maximum lifespan of 398 days
- As of March 15, 2026: maximum lifespan of 200 days
- As of March 15, 2027: maximum lifespan of 100 days
- As of March 15, 2029: maximum lifespan of 47 days
These limits apply only to new certificates created after each milestone. Existing certificates will retain their original expiration dates.
Self-signed certificates are explicitly excluded from these requirements.
Impact to Simploud
No action is required for Simploud customers.
Simploud uses self-signed certificates only, which are not subject to the CA/BF TLS certificate lifespan limits. As a result:
- There is no impact to existing configurations
- No certificate renewals are required
- No service disruption is expected
Why This Update Is Being Shared
Salesforce is broadly communicating this change as part of its ongoing Web Public Key Infrastructure (WebPKI) security improvements. This notice is provided for transparency and to confirm that Simploud is not affected.