How your SSL coverage works

*Maximum SSL validity period changes:

  • March 12, 2026 – 200 days (just under 7 months)
  • August 18, 2020 – 1 year (398 days)
  • March 1, 2018 – 2 years (825 days)

  • These changes come from the CA/Browser Forum, the industry consortium of Certificate Authorities, browser vendors, and technology companies that sets global SSL standards. Each reduction is intended to improve security and encourage automation, and the rules apply to every trusted Certificate Authority worldwide.

    Our pricing and billing cycles remain exactly the same — you can still prepay for up to five years. We offer a subscription-based service where you pay upfront for the period you need, with larger discounts for longer terms. The years you pay for are the years you get, with no extra fees.

    The only practical change is that the SSL certificate file itself will now need to be periodically reissued and reinstalled within your prepaid period.

    For single-domain SSL, we already have automation in place to make this seamless, with more automation methods on the way.


    I bought a multi-year certificate - how come I only received a 1-year SSL?

    When you purchase a 1- to 5-year plan from us, you're essentially prepaying for a sequence of 200-day certificates:

    • Each 200-day certificate is issued at no extra charge until the full term you paid for is covered
    • Prepaying locks in today's rate and shields you from future price increases
    • You'll simply need to reissue and reinstall each new file every 200 days. If you use one of our automation methods, that step is handled for you

    In short, the shorter file you received is not a mistake — it's how multi-year SSL plans work under the new global validity limit, while still giving you the full length of protection you purchased.


    How do I get my ssl reissued and reinstalled to use the full period I paid for? 

    Go to Account > SSL Certificates to check your setup:

    • Web-based automation, Server-side automation, and Namecheap SSL (Shared Hosting tool) — you’re all set. Your SSL will reissue automatically every 200 days.
    • Manual certificates — we recommend switching to one of our automation options to avoid manual reissue. If you keep the certificate in manual mode, we'll email a reminder 30 days before each required reissue.

    Automation currently covers single-domain SSLs activated through Namecheap.com. Wildcard, multi-domain, and API support are rolling out from March through June 2026.

    Note: Your up to 5-year subscription is delivered as a series of 200-day certificates. The subscription timer starts with the first certificate. If you skip a reissue, the timer keeps running — unused days aren't added to the end of the plan. To get the full value you've paid for, make sure you reissue each time before the 200-day certificate expires.


    What SSL automation options do you offer (and when can I use them)?

    1. Web-based automation (SSL Proxy)
      • What it does: You point your domain to a lightweight proxy we host; the proxy issues, renews, and re-issues the certificate every 200 days. Nothing to install or maintain.
      • Available now: single-domain and wildcard certificates;
      • Coming soon: multi-domain and API-driven flows by June – August 2026.
      • Requirement: your domain must be on Namecheap DNS (automatic migration during setup; an option to keep third-party DNS will be added later).

    1. Server-side automation (SSL Manager)
      • What it does: A one-time setup (file upload in cPanel or a single terminal command on a root/admin server) creates a tiny cron job that talks to our SSL API. It handles renewals and installs the new 200-day certificate automatically. It’s not ACME, no additional setup from your end is needed. 
      • Available now: single-domain certificates.
      • Coming soon: wildcard in July 2026, API access in August 2026, multi-domain in June – August 2026.
      • Works with: cPanel and any Apache or NGINX server with root or admin access.

    1. Automated issuance with manual installation
      • What it does: We automate Domain Control Validation and issuance every 200 days; you download the ready-made certificate and key (OTP-protected) and install them yourself.
      • On Namecheap DNS: fully hands-off—no extra steps after the initial setup.
      • On third-party DNS: add one CNAME record once; reissues then run automatically.
      • Availability: scheduled for June – August 2026.
      1. ACME support
        • What it does: Automates SSL issuance, installation, and renewal through the ACME protocol.
        • You’ll be able to use your preferred ACME-compatible client, such as Certbot, for a simpler and more streamlined setup.
        • Availability: scheduled for August – November 2026.

      Which automation option should I choose?

      • SSL Proxy – the simplest option with zero server work. Best for websites only, not other web services.
      • SSL Manager – when you need the certificate installed directly on your server and use cPanel, Apache, or NGINX.
      • ACME  – when your server supports ACME clients, and you’re comfortable configuring it.
      • Automated issuance + manual install – for edge cases where the other options do not fit.

      All options cover the full 1- to 5-year term you purchase; they simply replace each certificate every 200 days, as required by the new industry rules.

       

      What happens if I don’t reissue every 200 days? 

      An SSL file can only live 200 days—that’s the industry cap. If it isn’t reissued before that date, HTTPS stops working.

      Your 1- to 5-year plan is really a Certificate Authority-level subscription for a sequence of 200-day certificates. The timer starts the day the first cert is issued and keeps counting down; unused days aren’t added back.

      • Manual SSLs - you must reissue each certificate yourself every 200 days.
      • Automated SSLs - should also be reissued using the same method. The automated renewal flow must stay healthy:
        • Web-based (SSL proxy): keep the domain on Namecheap DNS.
        • Server-side (SSL manager): make sure the cron job keeps running.
        • Namecheap SSL (Shared Hosting tool): keep the site pointed to our hosting.

      If an automation path breaks, we’ll alert you so you can fix it and continue using the time you’ve already paid for.

      Updated
      Viewed
      70089 times

      Need help? We're always here for you.

      notmyip