{"id":33463,"date":"2020-02-20T23:20:41","date_gmt":"2020-02-20T23:20:41","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/"},"modified":"2020-02-20T23:20:41","modified_gmt":"2020-02-20T23:20:41","slug":"apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/","title":{"rendered":"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months"},"content":{"rendered":"

Safari will, later this year, no longer accept new HTTPS certificates that expire more than 13 months from their creation date.<\/p>\n

That means websites using long-life SSL\/TLS certs issued after the cut-off point will throw up privacy errors in Apple’s browser.<\/p>\n

The policy was unveiled by the iGiant at a Certification Authority Browser Forum (CA\/Browser) meeting on Wednesday. Specifically, according to those present at the confab, from September 1, any new website cert valid for more than 398 days will not be trusted by the Safari browser and instead rejected. Older certs, issued prior to the deadline, are unaffected by this rule.<\/p>\n

By implementing the policy in Safari, Apple will, by extension, enforce it on all iOS and macOS devices. This will put pressure on website admins and developers to make sure their certs meet Apple’s requirements \u2013 or risk breaking pages on a billion-plus devices and computers.<\/p>\n

\n

Certificates issued on or after that date with term beyond 398 days will be distrusted in Apple products<\/p>\n<\/blockquote>\n

Tim Callan, a senior fellow at PKI and SSL management firm Sectigo, who attended this week’s meeting in Slovakia, told The Register<\/em>: “This week Apple announced at the 49th CA\/Browser Forum Face-to-Face that it will limit the term of accepted TLS certificates to 398 days as of September 1, 2020. Certificates issued on or after that date with term beyond 398 days will be distrusted in Apple products.<\/p>\n

“Certificates issued prior to September 1 will have the same acceptable duration as certificates do today, which is 825 days. No action is required for these certificates.”<\/p>\n

Cutting certificate lifetimes has been mulled<\/a> by Apple, Google, and other members of CA\/Browser for months. The policy has its benefits and drawbacks.<\/p>\n

The aim of the move is to improve website security by making sure devs use certs with the latest cryptographic standards, and to reduce the number of old, neglected certificates that could potentially be stolen and re-used for phishing and drive-by malware attacks. If boffins or miscreants are able to break the cryptography in a SSL\/TLS standard, short-lived certificates will ensure people migrate to more secure certs within roughly a year.<\/p>\n

Shortening the lifespan of certificates does come with some drawbacks. It has been noted that by increasing the frequency of certificate replacements, Apple and others are also making life a little more complicated for site owners and businesses that have to manage the certificates and compliance.<\/p>\n

“Companies need to look to automation to assist with certificate deployment, renewal, and lifecycle management to reduce human overhead and the risk of error as the frequency of certificate replacement increase,” Callan told us.<\/p>\n

We note Let’s Encrypt issues<\/a> free HTTPS certificates that expire after 90 days, and provides tools to automate renewals, so those will be just fine \u2013 and they are used all over the web now. El Reg<\/em>‘s cert is a year-long affair so we’ll be OK.<\/p>\n

\"Firefox<\/p>\n

These truly are the end times for TLS 1.0, 1.1: Firefox hopes to ‘eradicate’ weak HTTPS standard by blocking it<\/h2>\n

READ MORE<\/span><\/a><\/div>\n

GitHub.com uses a two-year certificate, which would fall foul of Apple’s rules though it was issued before the cut-off deadline. However, it is due to be renewed by June, so there’s plenty of opportunity to sort that out. Apple’s website has a year-long HTTPS cert that needs renewing in October.<\/p>\n

Microsoft is an interesting one: its dot-com’s cert is a two-year affair, which expires in October. If Redmond renews it for another two years, it’ll trip up over Safari’s policy.<\/p>\n

No public announcement has been made by Apple, it seems. Digicert’s Dean Coclin has issued a memo<\/a> about the policy:<\/p>\n

“Why did Apple unilaterally decide to enforce a shorter certificate lifetime?” Coclin pondered.<\/p>\n

“Their spokesperson said it was to ‘protect users.’ We know from prior CA\/B Forum discussions that longer certificate lifetimes proved to be challenging in replacing certificates, in the case of a major security incident. Apple clearly wants to avoid an ecosystem that cannot quickly respond to major certificate-related threats.<\/p>\n

“Short-lived certificates improve security because they reduce the window of exposure if a TLS certificate is compromised. They also help remediate normal operational churn within organizations by ensuring yearly updates to identity such as company names, addresses and active domains. As with any improvement, shortening of lifetimes should be balanced against the hardship required of certificate users to implement these changes.”<\/p>\n

Apple declined to comment. \u00ae<\/p>\n

Sponsored:<\/span> Detecting cyber attacks as a small to medium business<\/a><\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Keep your crypto below 398 days after September 1 and you’re all good Safari will, later this year, no longer accept new HTTPS certificates that expire more than 13 months from their creation date.\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":33464,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-33463","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nApple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-02-20T23:20:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/02\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months\",\"datePublished\":\"2020-02-20T23:20:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/\"},\"wordCount\":767,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/02\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/\",\"name\":\"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/02\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg\",\"datePublished\":\"2020-02-20T23:20:41+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/02\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/02\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/","og_locale":"en_US","og_type":"article","og_title":"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-02-20T23:20:41+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/02\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months","datePublished":"2020-02-20T23:20:41+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/"},"wordCount":767,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/02\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/","url":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/","name":"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/02\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg","datePublished":"2020-02-20T23:20:41+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/02\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/02\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/apple-drops-a-bomb-on-long-life-https-certificates-safari-to-snub-new-security-certs-valid-for-more-than-13-months\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/33463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=33463"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/33463\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/33464"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=33463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=33463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=33463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}