Record · corpus.blog/posts/01a08783-2996-72ba-a876-ac53e9a5d2af

TLS Certificate Ecosystem History and Timeline - Certificate Authorities, Automation, and Shrinking Certificate Lifetimes | hidekazu-konishi.com

hidekazu-konishi.com · published 2 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hidekazu-konishi.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 67
Words captured: 8,995

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://cabforum.org/working-groups/server/baseline-requirements/requirements/

cabforum.org

https://cabforum.org/working-groups/server/ballots/

cabforum.org

https://googlechrome.github.io/chromerootprogram/

googlechrome.github.io

https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/

mozilla.org

https://support.apple.com/en-us/102028

support.apple.com

https://www.rfc-editor.org/

rfc-editor.org

https://letsencrypt.org/blog/

letsencrypt.org

https://www.rfc-editor.org/rfc/rfc2459.html

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc2560.html

rfc-editor.org

https://cabforum.org/uploads/EV_Certificate_Guidelines.pdf

cabforum.org

https://www.rfc-editor.org/rfc/rfc5280.html

rfc-editor.org

https://blog.mozilla.org/security/2011/08/29/fraudulent-google-com-certificate/

blog.mozilla.org

https://blog.mozilla.org/security/2011/09/02/diginotar-removal-follow-up/

blog.mozilla.org

https://cabforum.org/2011/11/22/ballot-62-adopt-baseline-requirements-draft-50/

cabforum.org

https://www.rfc-editor.org/rfc/rfc6844.html

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc6962.html

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc6960.html

rfc-editor.org

https://openssl-library.org/news/secadv/20140407.txt

openssl-library.org

https://cabforum.org/2014/10/14/ballot-125-caa-records-passed/

cabforum.org

https://cabforum.org/2014/10/16/ballot-118-sha-1-sunset-passed/

cabforum.org

Let’s Encrypt: Delivering SSL/TLS Everywhere Read at the source ↗

letsencrypt.org

https://cabforum.org/2017/02/24/ballot-185-limiting-the-lifetime-of-certificates/

cabforum.org

Our First Certificate Is Now Live Read at the source ↗

letsencrypt.org

Let's Encrypt is Trusted Read at the source ↗

letsencrypt.org

Why ninety-day lifetimes for certificates? Read at the source ↗

letsencrypt.org

Entering Public Beta Read at the source ↗

letsencrypt.org

Leaving Beta, New Sponsors Read at the source ↗

letsencrypt.org

https://cabforum.org/2016/08/05/ballot-169-revised-validation-requirements/

cabforum.org

https://cabforum.org/2017/03/08/ballot-187-make-caa-checking-mandatory/

cabforum.org

https://cabforum.org/2017/03/17/ballot-193-825-day-certificate-lifetimes/

cabforum.org

https://cabforum.org/2017/05/03/ballot-197-effective-date-of-ballot-193-provisions/

cabforum.org

Chrome’s Plan to Distrust Symantec Certificates Read at the source ↗

security.googleblog.com

https://googlechrome.github.io/CertificateTransparency/

googlechrome.github.io

Let's Encrypt Root Trusted By All Major Root Programs Read at the source ↗

letsencrypt.org

https://www.rfc-editor.org/rfc/rfc8555.html

rfc-editor.org

https://cabforum.org/2019/09/10/ballot-sc022v2-reduce-certificate-lifetimes/

cabforum.org

https://www.firefox.com/en-US/firefox/70.0/releasenotes/

firefox.com

https://www.rfc-editor.org/rfc/rfc8659.html

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8657.html

rfc-editor.org

https://cabforum.org/2020/07/16/ballot-sc031-browser-alignment/

cabforum.org

https://cabforum.org/2021/04/22/ballot-sc042-398-day-re-use-period/

cabforum.org

https://www.rfc-editor.org/rfc/rfc9162.html

rfc-editor.org

A New Life for Certificate Revocation Lists Read at the source ↗

letsencrypt.org

https://cabforum.org/2023/07/14/ballot-sc063v4-make-ocsp-optional-require-crls-and-incentivize-automation/

cabforum.org

Introducing Sunlight, a CT implementation built for scalability, ease of operation, and reduced cost Read at the source ↗

letsencrypt.org

Intent to End OCSP Service Read at the source ↗

letsencrypt.org

https://cabforum.org/2024/08/05/ballot-sc067v3-require-domain-validation-and-caa-checks-to-be-performed-from-multiple-network-perspectives-corroboration/

cabforum.org

https://cabforum.org/2024/08/05/ballot-sc075-pre-sign-linting/

cabforum.org

https://cabforum.org/2024/11/14/ballot-sc080v3-sunset-the-use-of-whois-to-identify-domain-contacts-and-relying-dcv-methods/

cabforum.org

Announcing Certificate Profile Selection Read at the source ↗

letsencrypt.org

Announcing Six Day and IP Address Certificate Options in 2025 Read at the source ↗

letsencrypt.org

We Issued Our First Six Day Cert Read at the source ↗

letsencrypt.org

Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0 Read at the source ↗

blog.mozilla.org

https://cabforum.org/2025/04/11/ballot-sc081v3-introduce-schedule-of-reducing-validity-and-data-reuse-periods/

cabforum.org

https://www.rfc-editor.org/rfc/rfc9773.html

rfc-editor.org

We've Issued Our First IP Address Certificate Read at the source ↗

letsencrypt.org

OCSP Service Has Reached End of Life Read at the source ↗

letsencrypt.org

https://cabforum.org/2025/11/20/ballot-sc-090-gradually-sunset-all-remaining-email-based-phone-based-and-crossover-validation-methods-from-sections-3.2.2.4-and-3.2.2.5/

cabforum.org

Decreasing Certificate Lifetimes to 45 Days Read at the source ↗

letsencrypt.org

6-day and IP Address Certificates are Generally Available Read at the source ↗

letsencrypt.org

https://cabforum.org/2026/01/24/ballot-sc097-sunset-all-remaining-use-of-sha-1-signatures-in-certificates-and-crls/

cabforum.org

Ballot SC098v2: Process RFC 8657 CAA Parameters

cabforum.org

Improving Transparency and Assurance in the Web PKI: Mozilla Root Store Policy v3.1 Read at the source ↗

blog.mozilla.org

https://c2sp.org/static-ct-api@v1.1.0

c2sp.org

https://googlechrome.github.io/CertificateTransparency/ct_policy.html

googlechrome.github.io

https://support.apple.com/en-us/103214

support.apple.com

https://www.chromium.org/Home/chromium-security/root-ca-policy/moving-forward-together/

chromium.org

Elsewhere on hidekazu-konishi.com (17)

Major Security Vulnerabilities History and Timeline - Disclosure, Impact, and the Response Practices They Changed | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

HTTP Security Headers Complete Reference - CSP, HSTS, COOP, COEP, Permissions Policy | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Cryptography Glossary for Engineers - AES, RSA, ECDSA, HKDF, Envelope Encryption, and TLS Explained | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Indie Dev Guide: From Domain Acquisition to Live Site with AWS Route 53, S3, CloudFront, and ACM | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

SSL/TLS Certificate Decoder and Chain Inspector - X.509 PEM/DER Viewer | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Email Authentication History and Timeline - SPF, DKIM, DMARC, and BIMI | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Secure Web Application Reference Architecture on AWS - Edge-to-Data Request Flow with CloudFront, WAF, ALB, Cognito, and RDS | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon CloudFront Origin Architecture Guide - Origin Access Control, Origin Shield, Failover, and VPC Origins | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Elastic Load Balancing Decision Guide - Choosing and Operating Application, Network, and Gateway Load Balancers | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS CloudFormation Templates and AWS Lambda Custom Resources for Associating AWS Certificate Manager, Lambda@Edge, and AWS WAF with a Website on Amazon S3 and Amazon CloudFront Cross-Region | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon Route 53 DNS Architecture Guide - Routing Policies, Resolver, Private Hosted Zones, and Hybrid DNS | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Certificate Distribution in Kubernetes with AWS Private CA - Issue, Request, Store, Consume, and the Layer Where Renewal Stops | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Post-Quantum Cryptography Standardization Timeline and Migration on AWS - From Algorithm Selection to Service Support | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS History and Timeline - Almost All AWS Services List, Announcements, General Availability(GA) | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Tool Use and Agent Protocol History and Timeline - Function Calling, MCP, and A2A | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS History and Timeline regarding AWS Key Management Service - Overview, Functions, Features, Summary of Updates, and Introduction to KMS | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS History and Timeline regarding Elastic Load Balancing - Overview, Load Balancer Types, Features, Summary of Updates, and Introduction to ELB | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com