You must renew your SSL certificate after two years and go through the SSL validation process again at the time of renewal — although this changes to one year starting Sept. 1, 2020. So, for example, even if you have bought an SSL certificate for five years, according to the CA/B Forum's guidelines, you must reissue it after two years (i.e., you must go through CSR generation, SSL validation, and installation process once again). However, it’s important to note that if you haven't changed your certificate authority and business information (physical address, phone numbers, etc.), this second OV/EV process will be way quicker than the first time around. Of course, using a reliable certificate manager also can help enterprises with managing all of their SSL certificates (and other digital certificates) at scale. Also, the same rule applies to all the CAs regardless of which brand you choose. So, if a CA, reseller, or hosting site tells you different, they’re providing you with the wrong information that can result in downtime or costly non-compliance penalties.