Please give us your opinion on the proposal to reduce the maximum validity period for TLS/SSL server certificates – your input is important.

This survey is confidential. Responses from different organizations will be combined.

1. In which country are you located? (Select one.) *

Other country (please specify)

2. Using your best estimate, how many employees work for your firm/organization worldwide? *

3. Which of the following best describes the industry to which your company belongs? *

Other, please specify

4. Which title best describes your position at your organization? *

Other, please specify

5. Which of the following most closely describes your job function in IT? *

Other, please specify

6. How often do you replace the majority of your TLS/SSL server certificates today? *

Other frequency (Specify):

7. Does your organization currently use automated certificate renewal and replacement methods (e.g., Venafi, ACME, DevOps orchestration) *

Other (specify):

8. Do you favor or oppose the proposal to reduce the maximum validity period for SSL/TLS certificates from the current 825 days (27 months) to 397 days (13 months)? Why? *

Comments:

9. What would be the impact on your organization if the CA/Browser Forum approves a ballot reducing the maximum validity period for SSL/TLS server certificates from the current 825 days (27 months) at present to 397 days (13 months), effective for new certificates issued on or after March 1, 2020? (Existing certificates will remain valid for their full term).

10. Under the proposed ballot, an organization and its domains would have to be revalidated every year instead of every two years. Do you believe the added security from revalidating this information every year is worth the cost of revalidating this information every year? *

Comments:

11. Do you have any other comments or additional information you would like us to present to the CA/Browser Forum on your behalf? (You will not be identified in connection with your comments):