Domain Control Validation (DCV) Reuse Periods

The CA/Browser Forum has approved a phased reduction in how long Domain Control Validation (DCV) can be reused before it must be completed again. Previously, Domain Control Validation (DCV) could be reused for up to 398 days. As of March 2026, the maximum reuse period has reduced to 200 days.

This means that every time you reissue an SSL Certificate, your existing Domain Control Validation (DCV) must still be within its reuse window. If your Domain Control Validation (DCV) has expired, you will need to complete the validation process again before your SSL Certificate can be issued or reissued.

Important : The SSL Certificate products offered by Trustico® carry a maximum validity of 200 days in line with industry requirements. Sectigo, the Certificate Authority (CA) that issues these SSL Certificates, enforces a Domain Control Validation (DCV) reuse period of 198 days beginning March 12, 2026. In practice, this means your Domain Control Validation (DCV) may need to be completed slightly sooner than the 200-day maximum suggests.

This change applies to all Domain Control Validation (DCV) methods equally, including approver e-mail, Domain Name System (DNS) validation, and file-based authentication. It does not matter which method you originally used to validate your domain. If the reuse period has expired, you will need to complete Domain Control Validation (DCV) again using any supported method. Learn About File-Based Authentication 🔗

Any existing Domain Control Validation (DCV) record that is older than 198 days is no longer eligible for SSL Certificate issuance or reissue as of March 12, 2026. This applies even if your original 398-day reuse window has not yet expired. Customers who completed Domain Control Validation (DCV) before September 2025 should expect to revalidate when they next reissue.

Future Reductions to Domain Control Validation (DCV) Reuse

The reduction to 200 days is the first phase. Further reductions are scheduled in the years ahead. From March 15, 2027, the Domain Control Validation (DCV) reuse period will reduce to 100 days. From March 15, 2029, it will reduce to just 10 days.

As these reuse periods shorten, completing Domain Control Validation (DCV) will become a more frequent part of managing your SSL Certificates. At 10 days, manual Domain Control Validation (DCV) for every reissue cycle becomes a significant operational burden, particularly for organizations managing multiple domains or subdomains. Learn About The Trustico® Validation Procedure 🔗

How Certificate as a Service (CaaS) Handles Domain Control Validation (DCV) Automatically

Trustico® Certificate as a Service (CaaS) eliminates the need to manage Domain Control Validation (DCV) reuse periods manually. When your Automatic Certificate Management Environment (ACME) client initiates a reissue, it automatically completes Domain Control Validation (DCV) as part of the process, using the Domain Name System (DNS) or HTTP challenge method configured during your initial setup.

This means that regardless of whether the Domain Control Validation (DCV) reuse period is 200 days, 100 days, or 10 days, your server handles the validation automatically every time a new SSL Certificate is requested. There is no need to monitor reuse windows, and there is no risk of a reissue failing because your previous Domain Control Validation (DCV) has expired. Explore Automated SSL Certificate Management with Certificate as a Service (CaaS) 🔗

Tip : When Domain Control Validation (DCV) reuse periods reduce to 10 days in 2029, every SSL Certificate reissue will require fresh domain validation. Certificate as a Service (CaaS) with Automatic Certificate Management Environment (ACME) automation is the most practical way to manage this, as your server completes Domain Control Validation (DCV) automatically with each reissue cycle.

Trustico® is also developing additional tools including Application Programming Interface (API) access and expiry notification services to help customers and partners who manage SSL Certificates manually stay ahead of these changes.

Most Popular Questions

Learn about the changes to Domain Control Validation (DCV) reuse periods, including the reduction from 398 days to 200 days effective March 15, 2026, and how this affects SSL Certificate issuance and reissue through Trustico® products.

What Does Domain Control Validation (DCV) Reuse Period Mean?

A Domain Control Validation (DCV) reuse period is the length of time your completed domain validation remains valid for SSL Certificate issuance or reissue. During this window, you do not need to complete Domain Control Validation (DCV) again when reissuing an SSL Certificate against the same domain.

How Long Can Domain Control Validation (DCV) Be Reused from March 2026?

From March 15, 2026, the maximum Domain Control Validation (DCV) reuse period reduces from 398 days to 200 days. The SSL Certificate products offered by Trustico® carry a maximum validity of 200 days in line with this industry requirement. Sectigo, the Certificate Authority (CA) that issues these SSL Certificates, enforces a reuse period of 198 days beginning March 12, 2026.

Does This Change Affect All Domain Control Validation (DCV) Methods?

Yes. The reduced reuse period applies equally to all Domain Control Validation (DCV) methods, including approver e-mail, Domain Name System (DNS) validation, and file-based authentication. It does not matter which method was originally used to validate your domain.

What Happens with Existing Domain Control Validation (DCV) Records After March 12, 2026?

Any existing Domain Control Validation (DCV) record that is older than 198 days will no longer be eligible for SSL Certificate issuance or reissue from March 12, 2026. This applies even if your original 398-day reuse window has not yet expired. Customers who completed Domain Control Validation (DCV) before September 2025 should expect to revalidate when they next reissue.

Will the Domain Control Validation (DCV) Reuse Period Continue Shortening?

Yes. From March 15, 2027, the Domain Control Validation (DCV) reuse period will reduce to 100 days. From March 15, 2029, it will reduce to just 10 days. These reductions are part of a phased schedule approved by the CA/Browser Forum.

Must Domain Control Validation (DCV) Be Completed for Every SSL Certificate Reissue?

Only if your previous Domain Control Validation (DCV) has expired. If your Domain Control Validation (DCV) is still within its reuse window, you can reissue without completing it again. As reuse periods shorten, Domain Control Validation (DCV) will need to be completed more frequently.

Does Certificate as a Service (CaaS) Handle Domain Control Validation (DCV) Automatically?

Yes. When using Certificate as a Service (CaaS), the Automatic Certificate Management Environment (ACME) client installed on your server completes Domain Control Validation (DCV) automatically as part of every reissue cycle. There is no need to monitor reuse windows or manually revalidate your domain, regardless of how short the reuse period becomes.

Why Does Sectigo Enforce This Change March 12 Instead of March 15?

Sectigo has chosen to begin enforcement on March 12, 2026, three days ahead of the CA/Browser Forum deadline of March 15, 2026. This is an operational decision by Sectigo as the Certificate Authority (CA). In practice, this means Domain Control Validation (DCV) reuse is limited to 198 days rather than the 200-day maximum set by the CA/Browser Forum.

Does Trustico® Build Tools for Managing More Frequent Domain Control Validation (DCV)?

Yes. Trustico® is developing Application Programming Interface (API) access and expiry notification services that will help customers and partners track both SSL Certificate expiration dates and Domain Control Validation (DCV) reuse periods. For fully automated management, Certificate as a Service (CaaS) eliminates the need to track these dates entirely.

Ask Trustico® Assistant

For Instant Answers - Start Here When You Have a Question or Need Help

How Quickly Are SSL Certificates Issued - Domain Validation, CaaS, OV and EV Explained

How Quickly Are SSL Certificates Issued - Domai...

Understanding what happens during the issuance process helps you choose the right SSL Certificate for your timeline and avoid unnecessary delays that could impact your launch, migration, or renewal schedule.

How Quickly Are SSL Certificates Issued - Domai...

Understanding what happens during the issuance process helps you choose the right SSL Certificate for your timeline and avoid unnecessary delays that could impact your launch, migration, or renewal schedule.

DNSSEC Validation Enforcement for SSL Certificate Issuance - March 2026

DNSSEC Validation Enforcement for SSL Certifica...

Starting in March 2026, the way Certificate Authorities (CA) handle Domain Name System Security Extensions (DNSSEC) during SSL Certificate issuance is changing significantly.

DNSSEC Validation Enforcement for SSL Certifica...

Starting in March 2026, the way Certificate Authorities (CA) handle Domain Name System Security Extensions (DNSSEC) during SSL Certificate issuance is changing significantly.

SSL Certificate Validity Periods Are Changing to 200 Days

SSL Certificate Validity Periods Are Changing t...

The reduction in SSL Certificate validity periods is driven by the need to regularly confirm that the Certificate holder is still entitled to use the SSL Certificate. No new Certificate...

SSL Certificate Validity Periods Are Changing t...

The reduction in SSL Certificate validity periods is driven by the need to regularly confirm that the Certificate holder is still entitled to use the SSL Certificate. No new Certificate...

SSL Certificate Works on WWW but Not Root Domain : Troubleshooting Guide

SSL Certificate Works on WWW but Not Root Domai...

Several server configuration problems can cause SSL Certificates to work on the www version but fail on the non-www version of a domain. Understanding these causes helps identify the specific...

SSL Certificate Works on WWW but Not Root Domai...

Several server configuration problems can cause SSL Certificates to work on the www version but fail on the non-www version of a domain. Understanding these causes helps identify the specific...

Understanding SSL Certificate File Formats and Extensions

Understanding SSL Certificate File Formats and ...

SSL Certificate files can be broadly categorized into three main types based on how the data is encoded and stored. Understanding these categories will help you identify which format you...

Understanding SSL Certificate File Formats and ...

SSL Certificate files can be broadly categorized into three main types based on how the data is encoded and stored. Understanding these categories will help you identify which format you...

Understanding the AutoCSR Service for SSL Certificate Orders

Understanding the AutoCSR Service for SSL Certi...

Learn how AutoCSR works, compare it to hosting company practices, find out when automated credential generation is appropriate versus generating your own CSR. Covers security considerations including the Trustico® non-retention...

Understanding the AutoCSR Service for SSL Certi...

Learn how AutoCSR works, compare it to hosting company practices, find out when automated credential generation is appropriate versus generating your own CSR. Covers security considerations including the Trustico® non-retention...

1 / 6