If you use features that rely on certificates, prepare to perform Domain Control Validation (DCV) more often. An upcoming industry-wide change decreases the maximum domain validation reuse period of time for Transport Layer Security (TLS) certificates over the next 3 years. As of March 15, 2026, the maximum period for domain validation reuse for new certificates is 200 days.
Where: This change applies to Lightning Experience, Salesforce Classic, and all editions of the Salesforce mobile app. The time period applies to new certificates that a public Certificate Authority (CA) signs, regardless of whether you, Salesforce, or a third party purchases the certificate.
When: In August 2025, the Certification Authority Browser Forum (CA/Browser Forum) announced a phased approach to shorten the maximum period of time during which domain validation information may be reused for new TLS certificates. That time period decreased from 398 days to 200 days on March 15, 2026. It decreases to 100 days on March 15, 2027, and to 10 days on March 15, 2029.
Why: Salesforce complies with the guidance of the CA/Browser Forum, the organization that sets most Web Public Key Infrastructure (WebPKI) rules. Their TLS Server Baseline Requirements change regularly. Those requirements are outside of Salesforce control, and certificate vendors are bound by the same rules.
How: Review your certificate use. If you get your own certificates, plan to perform Domain Control Validation more often.