Knowledge Base


DCV Reuse Reduction to 200 Days – Implementation & Guidance for Partner customers and Retail Customers
DCV Reuse Reduction to 200 Days – Implementation & Guidance for Partner customers and Retail Customers
1. Overview
An industry‑mandated update to a reduction of certificate lifespan from 398 days to 200 days effect on March 15, 2026. The maximum allowable Domain Control Validation (DCV) reuse period will also be reduced from 398 days to 200 days, impacting all certificate issuance channels including Partners, Retail customers, and EPKI customers.
This change applies to all Certification Authorities and is part of broader baseline requirement updates being introduced globally.
2. What is Changing?
Starting March 15, 2026, all existing and future DCV records will be capped at a maximum lifetime of 200 days from their original creation date, regardless of when validation was completed.
Any DCV record older than 200 days from this date will no longer be eligible for reuse; meaning certificate reissuance will require the domain to be revalidated.
Future Planned Reductions
Industry‑mandated reductions to certificate validity and DCV reuse will follow this timeline:
-
March 15, 2026: TLS certificate max validity 200 days, DCV reuse 200 days
-
March 15, 2027: TLS certificate max validity 100 days, DCV reuse 100 days
-
March 15, 2029: TLS certificate max validity 47 days, DCV reuse 10 days
Existing certificates remain valid until they expire.
3. Impact on Partners & Customers
3.1 Legacy Partner Channels
Channels:
-
Web Host Reseller
-
Reseller
-
EPKI
Partners using these channels complete DCV per order, so they must ensure updated notifications and workflows for the new 200‑day reuse limit.
3.2 Retail Customers
Retail customers using WHCMS or SSL247 follow the same “per‑order DCV” model and will also need to revalidate domains for reissues beyond 200 days.
4. Reissuing Certificates Under the New Rules
4.1 API‑Connected Partners
-
Sectigo API (Web Host Reseller, Reseller):
Uses AutoReplaceSSL API call; supports DCV via CNAME, DNS TXT, HTTP/HTTPS, or email.
-
Xolphin API:
Reissue via standard reissue call; supports CNAME, HTTP/HTTPS, or email.
-
SSL247 API:
Reissue via reissue call; supports CNAME, HTTP/HTTPS, or email.
4.2 Portal‑Only Users and Retail Customers
Partners without API integration (Sectigo Reseller Portal, EPKI) perform reissues manually by:
-
Navigating to the order
-
Selecting Reissue
-
Submitting a CSR
-
Supported DCV methods: CNAME, DNS TXT, HTTP/HTTPS, or email.
-
Click here for full instructions: How to Reissue or Replace SSL Certificates? | Sectigo® Official
4.3 Migration Option
-
EPKI users may migrate to SCM (Sectigo Certificate Manager) to benefit from automated lifecycle management.
-
Retail customers can opt for SCM pro.
For further details on SCM, click on the below link:
https://www.sectigo.com/resource-library/sectigo-certificate-manager-product-brochure
5. Recommended Partner Actions
5.1 Immediate Actions
-
Ensure DCV expiration alerts are configured and monitored to avoid missed renewals.
-
Review inventory of public TLS certificates and flag those expiring after March 15, 2026.
-
Confirm that ACME or automated issuance workflows are ready for shorter DCV validity.
5.2 Automation Encouraged
Transition manual processes to automated issuance where possible to reduce operational overhead and outage risk. Recommended validation methods:
-
DNS CNAME
-
DNS TXT
6. Support and Resources
Sectigo offers support for identifying affected DCV records and planning transitions. Partners and customers may:
-
Your partner account manager (if applicable)
7. Summary
The 200‑day DCV reuse limit aligns Sectigo with upcoming global industry requirements. All partners, resellers, and customers must ensure their workflows, alerts, and automation processes are updated before March 15, 2026, to avoid issuance disruption. This update affects reissues, lifecycle automation, API usage, and domain validation practices across all channels.
Related Articles:
Tags:
Need help?
Need help making a purchase? Contact us today to get your certificate issued right away.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!