Cloud platform · checked November 15, 2026

Is Google Cloud (managed certificates) ready for 100-day and 47-day certificates?

Renews automatically

Google Cloud (managed certificates)’s own certificates renew automatically, so the shorter lifetimes (100 days from March 15, 2027, 47 days from March 15, 2029) are handled for you, with the exceptions below.

What renews automatically

• Google Cloud starts renewal when about one-third of the validity remains: about 15 days before expiry for 45-day certificates, about 30 days for 90-day ones.[Google Cloud]
• Certificates from Google's Public CA are "gradually transitioning" from 90-day to 45-day validity. Let's Encrypt-issued ones stay 90-day for now.[Google Cloud]

What doesn’t

• Self-managed certificates: you obtain, upload and renew them yourself.[Google Cloud]
• If domain validation fails (for example DNS no longer points to the load balancer), renewal fails and the load balancer serves an expired certificate.[Google Cloud]

When it renews

About one-third of the validity period before expiry.[Google Cloud]

What to do, and by when

1. March 15, 2027 · In 120 days
   Maximum certificate lifetime drops to 100 days[CA/Browser Forum 1 (CA/Browser Forum — Baseline Requirements for TLS Server Certificates (v2.3.1, 4 Oct 2026)), 2 (CA/Browser Forum — Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods)]
   Move self-managed certificates to Google-managed ones where possible.

Steps

1. List your certificates in Certificate Manager or the load balancer and note which are self-managed.
2. For Google-managed certificates, make sure DNS A/AAAA records still point to the load balancer.