TLS & certificates
TLS certificate news, and what to do about it.
Certificate lifetimes are shrinking from 398 days toward 47, Chrome keeps tightening its root program, and expired certificates still take down household-name services. This page collects our TLS certificate news coverage and the guides that go with it: renewal automation, choosing a certificate authority, certificate transparency and expiry monitoring.
Choosing a Certificate Authority for 47-Day Certificates: The Most Reliable SSL Providers
Which SSL providers are most reliable as certificates shrink to 47 days? ACME, ARI, EAB and incident history for nine CAs, plus a two-CA fallback using CAA.
Read article →The Best SSL Certificate Monitoring Tools in 2026
The best SSL certificate monitoring tools compared: free options, open source (Zabbix, blackbox_exporter), dedicated monitors and enterprise CLM platforms.
Read article →47-Day TLS Certificates: The Schedule, and How to Be Ready
TLS certificate lifetimes drop to 100 days in 2027 and 47 in 2029. The CA/Browser Forum schedule, why it is happening, and what breaks if you renew by hand.
Read article →How to Monitor SSL/TLS Certificate Expiry (Before Your Users Do)
SSL certificate expiration monitoring explained: how expiry outages happen, how to monitor certificate expiry for free, and what a good setup should alert on.
Read article →Microsoft 365 Was Down for 67 Hours. Admins Traced It to an Expired Certificate.
From August 31 to September 3, 2026, Exchange Online, Teams and SharePoint failed worldwide. Microsoft blamed a core authentication configuration; admins saw an expired certificate thumbprint in the errors. What to check on your own domains.
Read article →Attack Surface Scan vs. Cert Spotter: Certificate Monitoring Compared
Cert Spotter and Attack Surface Scan both watch certificate transparency and the certificate each host serves. Where they match, where Cert Spotter is ahead, where Attack Surface Scan goes further, and how the two price.
Read article →SSL Labs vs. SecurityHeaders.com vs. Mozilla Observatory: Free Scanners Compared
The best free website security scanners compared: SSL Labs, securityheaders.com, Mozilla Observatory, MXToolbox and Hardenize. What each grades and misses.
Read article →As of June 15, Every Public TLS Certificate Goes Into a Transparency Log. Your Hostnames Are Now Public.
Chrome Root Program Policy v1.8 requires every CA to log every TLS precertificate and certificate to Certificate Transparency from June 15, 2026. DigiCert enforced it June 1. The opt-out is gone: what that exposes, and how to use it.
Read article →Let's Encrypt Stopped Issuing for Two and a Half Hours. Did Your Renewals Notice?
On May 8, 2026 Let's Encrypt halted all issuance for about 2.5 hours after its new Generation Y cross-signed intermediates shipped without the serverAuth EKU. Renewals failed with serverInternal. What a quiet renewal failure looks like on your side.
Read article →