WebPKI Observatory — BR Readiness
Among the 43 active TLS-issuing CAs measured for SC-081 readiness, 10 already meet the aggressive 47-day maximum validity target coming in March 2029, while 6 still exceed the 100-day threshold that takes effect in March 2027 and 4 remain above the 200-day limit enforced since March 2026. This readiness challenge exists against a regulatory surface that has grown 121-fold since 2000 to 6,664 total obligations spanning CA/B Forum requirements, four root program policies, and WebTrust-ETSI audit criteria, with 76% carrying mandatory language. CAs navigate median 63-day validity periods while tracking obligations that have expanded from a simple baseline to thousands of testable requirements, with zero clarifying ballots passed since 2022 despite this complexity.