Skip to content

Automation of certificate management

Nameshield is at the heart of digital certificate automation.

Faced with the reduc­tion in the valid­i­ty peri­od of cer­tifi­cates to 47 days, the automa­tion of their man­age­ment (from order­ing to instal­la­tion) is an essen­tial pre­req­ui­site to lim­it human inter­ven­tion and asso­ci­at­ed risks.

Nameshield con­nects all the essen­tial soft­ware and func­tion­al com­po­nents (CLM, ACME, AC and DNS) to auto­mate the cer­tifi­cate life­cy­cle and lim­it the man­u­al work­load.

Watch our webi­nar on automa­tion
Contact us
Nameshield is at the heart of digital certificate automation.

Reduction of the certificate validity period to 47 days

Driven by the CA/B Forum to strength­en web secu­ri­ty, the fre­quen­cy of SSL/TLS cer­tifi­cate renewals will accel­er­ate dras­ti­cal­ly in the com­ing years.

The new reg­u­la­to­ry timetable and its impacts:

  • Since March 15, 2026: the max­i­mum dura­tion of TLS cer­tifi­cates is lim­it­ed to 200 days.
  • On March 15, 2027: this peri­od will be reduced to 100 days
  • March 15, 2029: fur­ther reduc­tion to 47 days
  • Between March 2026 and March 2029: the dura­tion of the DCV chal­lenge (domain val­i­da­tion) will be lim­it­ed to 10 days, requir­ing mas­tery of the DNS com­po­nent.
Reduction of the certificate validity period to 47 days

Operational impact: The reduc­tion to 47 days for cer­tifi­cates and to 10 days for the DCV chal­lenge will mul­ti­ply the admin­is­tra­tive and tech­ni­cal work­load by eight.

Manual man­age­ment is now obso­lete: cer­tifi­cate automa­tion is the only sus­tain­able solu­tion to avoid acci­den­tal expi­ra­tions and ser­vice out­ages.

Nameshield: a unique market positioning

Nameshield has a unique mar­ket posi­tion by simul­ta­ne­ous­ly con­nect­ing the three essen­tial build­ing blocks for automat­ing pub­lic cer­tifi­cates:

Automation brick: Nameshield has con­nec­tors to the main CLM ven­dors on the mar­ket and an ACME ser­vice.

Certification Authorities Building Block: Nameshield is direct­ly con­nect­ed with 7 cer­tifi­cate author­i­ties to man­age all authen­ti­ca­tion process­es.

DNS Brick: Nameshield man­ages its cus­tomers’ Primary DNS for ful­ly auto­mat­ed DCV val­i­da­tion and pro­vides the DCV as a ser­vice for oth­er DNS con­fig­u­ra­tions.

Simultaneously connecting the three essential building blocks for automating public certificates
Contact us

A strategic relationship with CLM publishers

Certificate Lifecycle Management (CLM) is the ide­al soft­ware solu­tion to man­age the entire life­cy­cle of dig­i­tal cer­tifi­cates (inven­to­ry, man­age­ment strat­e­gy, order­ing and deploy­ment) in order to secure process­es and pre­vent ser­vice inter­rup­tions.

For com­pa­nies man­ag­ing com­plex IT sys­tems, the automa­tion of cer­tifi­cate man­age­ment relies on a per­fect syn­er­gy between the CLM soft­ware and our infra­struc­ture:

  • Complete map­ping of pub­lic and pri­vate cer­tifi­cates
  • Centralized man­age­ment of the man­age­ment strat­e­gy
  • Seamless inter­con­nec­tion between your IT sys­tems and Nameshield
  • Automatic order­ing of your pub­lic cer­tifi­cates at Nameshield
  • Deployment across all instances

Our CLM pub­lish­er net­work:

CLM (Certificate Lifecycle Management)

Notre service ACME (Automated Certificate Management Environement)

The ACME pro­to­col is the stan­dard that enables secure and auto­mat­ed exchanges between your servers and Certification Authorities (CAs).

The advan­tages of Nameshield’s ACME ser­vice:

Dedicated ACME Server

Nameshield offers an ACME serv­er enabling the auto­mat­ic issuance of cer­tifi­cates.

Compatibility

Compatible with stan­dard ACME clients on the mar­ket, it inte­grates eas­i­ly with your web servers.

Automation

Automatic issuance, ver­i­fi­ca­tion and instal­la­tion before your cer­tifi­cates expire.

Contact us

DNS brick expertise for the DCV challenge

Nameshield offers Domain Control Validation (DCV) as a ser­vice to auto­mate cer­tifi­cate man­age­ment by pro­vid­ing cen­tral­ized val­i­da­tion, elim­i­nat­ing man­u­al tasks, and ensur­ing real-time automa­tion for issuance and renew­al. This ensures the com­pli­ance with new indus­try stan­dards and the reduced valid­i­ty peri­ods imposed by the CA/Browser forum reg­u­la­tor.

The chal­lenge of the DNS com­po­nent: with the DCV chal­lenge reuse peri­od reduced to 10 days in 2029, pre-val­i­da­tion of domain names will be very lim­it­ed and their reval­i­da­tion will be almost manda­to­ry with each order.

Nameshield’s advan­tages for man­ag­ing the DCV chal­lenge:

  • The deposit of con­trol tokens (TXT or CNAME) on your DNS zone is done auto­mat­i­cal­ly, avoid­ing man­u­al manip­u­la­tions.
  • Since proof of domain own­er­ship is val­i­dat­ed in a sec­ond, the issuance of your OV/DV cer­tifi­cates is imme­di­ate and obtain­ing EV cer­tifi­cates is great­ly accel­er­at­ed.
Maîtrise de la brique DNS pour le challenge DCV

Contact us to know more about our offer