Website platform · checked November 15, 2026

Is Shopify ready for 100-day and 47-day certificates?

Renews automatically

Shopify’s own certificates renew automatically, so the shorter lifetimes (100 days from March 15, 2027, 47 days from March 15, 2029) are handled for you, with the exceptions below.

What renews automatically

• TLS certificates are free and issued automatically for every domain added to Shopify.[Shopify]
• If you use CAA records, Shopify needs letsencrypt.org, pki.goog and ssl.com allowed.[Shopify]

What doesn’t

• You can't use third-party SSL certificates with a Shopify store.[Shopify]

When it renews

Unknown: Shopify doesn’t say how far ahead it renews.

What to do, and by when

1. March 15, 2027 · In 120 days
   Maximum certificate lifetime drops to 100 days[CA/Browser Forum 1 (CA/Browser Forum — Baseline Requirements for TLS Server Certificates (v2.3.1, 4 Oct 2026)), 2 (CA/Browser Forum — Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods)]
   Nothing to do. Keep your domain's DNS pointing to Shopify and any CAA records allowing Shopify's CAs.

Steps

1. In Shopify admin, open Settings > Domains and check each domain shows as connected with TLS issued.
2. If you use CAA records, make sure they allow letsencrypt.org, pki.goog and ssl.com.
3. If you bought a certificate for a Shopify store, you don't need it. Shopify doesn't accept third-party certificates.