<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Feb 10, 2017, at 1:08 AM, Gervase Markham via Public <<a href="mailto:public@cabforum.org" class="">public@cabforum.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 09/02/17 21:08, Ryan Sleevi via Public wrote:<br class=""><blockquote type="cite" class="">The validity period for an EV Certificate SHALL NOT exceed twenty seven<br class="">months. It is RECOMMENDED that EV<br class="">Subscriber Certificates have a maximum validity period of twelve months.<br class=""></blockquote><br class="">What I'm quoting here is the current EV guidelines wording. Does anyone<br class="">have stats on what percentage of EV certificates follow that RECOMMENDED<br class="">recommendation, and how that compares with DV?</div></div></blockquote><br class=""></div><div><a href="https://cabforum.org/pipermail/public/2017-February/009388.html" class="">https://cabforum.org/pipermail/public/2017-February/009388.html</a> has the EV stats (which are very complete due to Chrome’s CT requirement). About 19.5% of EV certificates have a validity period of 12 months or less.</div><div><br class=""></div><div>I don’t have DV data. It will obviously be heavily skewed by one issuer that has more than twenty million unexpired DV certificates. That one CA accounts for more than 56% of _all_ known unexpired certificates (DV/OV/EV combined). A second issuer accounts for more than 13% of all certificates. Together they have 69.9%. It is known that both these issuers do offer any options for certificate duration and do not charge for certificates, which means they tend to skew the data.</div><div><br class=""></div><div>Thanks,</div><div>Peter</div></body></html>