Following our earlier update on shorter SSL certificate lifetimes, DigiCert has shared additional details about upcoming changes to its certificate validation and issuance processes. These updates are part of the same CA/Browser Forum requirements and will take effect on 24 February 2026.
In most cases, no action is required. This update is intended to give you clarity on what’s changing and when it may be worth reviewing your setup.
What’s changing
- DNSSEC validation (only if you use DNSSEC)
From 24 February 2026, DigiCert will validate DNSSEC settings during certificate issuance if DNSSEC is enabled on the domain.
What this means for you:
• DNSSEC is not required for SSL certificates
• If you don’t use DNSSEC, nothing changes
• If you do use DNSSEC, DigiCert will check that it’s configured correctly
• Incorrect DNSSEC configurations may cause certificate issuance to fail
If DNSSEC is part of your setup, DigiCert recommends verifying your configuration in advance.
- Expanded validation checks
DigiCert will also slightly expand its existing validation checks by confirming domain control from additional network locations. This further strengthens the issuance process and helps reduce the risk of abuse.
These checks have already been in use since 2025, and no disruption is expected for most customers.
When action may be needed
Action is only required in specific scenarios:
- If you use HTTP-based domain validation, and
- You restrict incoming traffic using IP or User-Agent allowlists
In these cases, you may need to update your allowlists to include additional DigiCert validation sources.
If this does not apply to your setup, no action is required.
Why this matters
Together with shorter certificate lifetimes, these updates reflect a broader industry-wide move towards stronger automation and more frequent validation. While this increases overall security, it also highlights the importance of having reliable, automated SSL processes in place.
If you have questions about these changes or want to double-check your configuration, our support team is happy to help.