47-Day Readiness Kit - scored readiness audit, executive briefing deck, vendor evaluation matrix, and DCV migration plan
SC-081v3 · Phase 1 in effect now

Are we ready for 47-day certificates? Answer with a number.

The 47-Day Readiness Kit turns the SC-081v3 deadline into a scored audit, an executive briefing, and a migration plan — built by enterprise PKI engineers who run these assessments for a living.

Instant download · 4 working documents · Single-organization license

Not sure you need it? Run the free interactive audit first →

The deadline is fixed. Most environments aren't.

The CA/Browser Forum passed Ballot SC-081v3 in April 2025. It is not a proposal — every public certificate authority is bound by it.

In effect
March 15, 2026Maximum certificate validity reduces to 200 days
213 days
March 15, 2027Maximum certificate validity reduces to 100 days
944 days
March 15, 202947-day validity + 10-day DCV reuse limit
renewal volume per certificate per year at 47-day validity
~35
domain validations per certificate per year under 10-day DCV reuse
20–40%
the realistic share of enterprise renewals that are fully automated today — vendors claim 80%
#1
failure point is deployment, not issuance: the cert renews, then sits in a directory while the old one expires

Everyone plans to automate "before it matters." Phase 1 is already in effect — it matters now, at 2× volume. Everything that breaks quietly this year breaks loudly at 8×.

Your three current options

The spreadsheet approach.

Someone opens a blank workbook, lists the certs they remember, and calls it an assessment. No weighting, no coverage of DCV or deployment, no way to defend the number when leadership asks how bad it is.

The vendor approach.

Ask your CLM vendor if you're ready. You'll get a demo, a datasheet, and an answer that happens to require buying more of their product. "ACME support" on a datasheet routinely means "technically available, never production-tested in your environment."

The consultant approach.

A readiness assessment engagement runs $10,000–$25,000 and lands in 6–8 weeks. Right answer for a Fortune 500 multi-CA estate. Overkill if what you need this quarter is an honest score and a defensible plan.

The kit is the middle path: the same assessment structure a consultant would run, as working documents you fill in over an afternoon — for less than the cost of the kickoff call.

Four working documents. One honest answer.

Everything you need to score your environment, brief leadership, choose your tools, and plan your migration.

47-Day Readiness Workbook

Excel (.xlsx)

  • The 82-point audit as a weighted scoring instrument — every item weighted by outage risk (weight-3 items are the ones that cause 2 AM pages)
  • Complete / Partial / Not Started / N/A tracking per item
  • Dashboard that computes section scores and overall READY / ON TRACK / AT RISK / CRITICAL rating automatically
  • Score only what you can prove — the workbook makes honesty the default

Executive Briefing Deck

PowerPoint (.pptx)

  • Nine slides that turn your score into budget: the mandate, the 8× math with your numbers, your readiness score, where pipelines break, your top gaps, the plan, and the ask
  • Speaker notes on every slide tell you what to say and what question is coming next
  • Present it the same day you finish the audit

CLM Vendor Evaluation Matrix

Excel (.xlsx)

  • 19 criteria weighted for 47-day survival — DNS-01 automation with your DNS providers, deployment to your platforms, pricing that survives 8× volume
  • Auto-ranked totals across vendors
  • The disqualification rule vendors hate: score 0 on any critical criterion and they're out, regardless of total

DCV Migration Plan

Word (.docx) + Markdown

  • The 10-day DCV reuse window is harder than the 47-day headline — this template plans your way out of email validation before the March 2028 sunset
  • Decision flowchart, DNS API inventory, migration waves, per-method checklists, rollback plan, sign-off page
  • Markdown edition pastes straight into Confluence or Notion

This is the judgment you're paying for

Real operational guidance embedded throughout every document.

From the workbook, Section 2

"Semi-automated" means "manual" when it matters. If a human has to click approve at 3 AM on a weekend, it's manual. The honest enterprise split is 20–40% automated — if your number is higher, you're probably counting auto-renew in a CA portal as automation while deployment is still manual.

From the vendor matrix

Demand demonstration, not datasheet claims — especially for DNS-01 automation and deployment to your platforms. Include your incumbent and a DIY option (cert-manager / Certbot + scripts) as columns; the comparison keeps commercial vendors honest on price.

From the exec deck speaker notes

If you only get one yes, take DNS API access — it unblocks DCV automation, which unblocks everything.

The kit that updates when the rules do

These documents cite live CA/Browser Forum deadlines — and those deadlines move. FixMyCert's compliance monitoring engine tracks every SC-081v3 milestone, DCV sunset ballot, and root-program change automatically. When requirements shift, the kit is updated and your purchase includes lifetime access to every future update — you always download the current release from the same link. Buy once; stay current.

A template bought elsewhere is accurate on the day you download it. This one stays accurate.

Built for the people who do the work — and the people who approve the card.

If you're the one doing the work

  • The PKI admin whose boss forwarded a "47-day certificates?!" article with no further instructions
  • The security engineer who knows the manual renewals are a time bomb and needs ammunition
  • The DevOps lead who owns certs across three cloud accounts and an F5 nobody will touch
  • The consultant who needs a defensible assessment framework for client engagements

If someone forwarded you this link

  • The IT director who needs a readiness number for the infrastructure roadmap
  • The CISO who wants the gap analysis without a six-week consulting engagement
  • The engineering manager whose report said "we're probably fine" — this kit replaces "probably" with a percentage

$199 is under every corporate card limit. No PO, no procurement cycle, no vendor onboarding. Expense it and know where you stand by Friday.

One Kit. Four Working Documents.

$199

One-time purchase. Instant download.

  • 47-Day Readiness Workbook (.xlsx, auto-scored)
  • Executive Briefing Deck (.pptx with speaker notes)
  • CLM Vendor Evaluation Matrix (.xlsx, auto-ranked)
  • DCV Migration Plan (.docx + .md for your wiki)
  • Lifetime access to all future updates — buy once; stay current
  • Single-organization license

Secure checkout via Stripe. Download link delivered instantly.

Common Questions

Know where you stand by Friday.

Four working documents. One afternoon. One honest score you can actually defend.

Secure checkout via Stripe. Instant download after purchase.