Google-managed public SSL certificates signed by Google Public CA (pki.goog) are gradually transitioning from a 90-day validity period to a 45-day validity period to improve security.

To align with modern industry-wide security standards and promote shorter certificate lifespans, Google-managed public certificates now rotate more frequently. This proactive rotation enhances the overall security posture of load balancers. The transition requires no manual intervention or configuration changes as Certificate Manager automatically manages both issuance and renewal.

For more information, see Google-managed certificates and Use Google-managed certificates.

You can now attach tags to Certificate Manager resources during creation. This feature is available in Preview.

For more information, see Create and manage tags for Certificate Manager resources.

Certificate Manager (2nd gen) is available in Preview. Certificate Manager (2nd gen) offers a unified control plane to observe, manage, and automate certificates across your organization.

For more information, see Certificate Manager (2nd gen) overview.

Certificate Manager has passed HIPAA compliance validation and is listed as a covered product in HIPPA compliance on Google Cloud.

You can now update the "labels" and "descriptions" of your certificate issuance configurations using the Google Cloud CLI or API. For more information, see Manage certificate issuance configuration.

Change

Regional Google-managed certificates are now generally available (GA). For more information, see Certificate Manager overview.

Change

Support for managing certificates independently in each project with separate authorization is now generally available (GA). For more information, see Manage DNS authorizations.

Certificate Manager supports integration with regional external Application Load Balancers and regional internal Application Load Balancers. This feature is generally available (GA). For more information, see Certificate Manager overview.

Certificate Manager supports the management of certificates independently in each project with separate authorization. You can also issue regional managed certificates with Certificate Manager. This is a public preview feature. For more information, see Certificate Manager overview.

Certificate Manager supports Mutual TLS (mTLS) authentication. This feature is generally available (GA).

Certificate Manager now supports integration with regional external Application Load Balancers and regional internal Application Load Balancers. This is a public preview feature. For more information, see Certificate Manager overview.

The Certificate Authority Service integration feature is now generally available.

Feature

Certificate Manager now supports Mutual TLS (mTLS) authentication. This is a public preview feature. For more information, see Trust configs.

You can now view a list of certificates managed by Certificate Manager in your project in the Cloud Console. You can also view detailed information about each certificate. For instructions, see Manage Certificates.

Load Balancing SSL certificates, previously available in the "Certificates" tab on the "Load Balancing" page, are now also available in the Certificate Manager page in the "Classic Certificates" tab.

This is the General Availability release of Certificate Manager.

Billing has been enabled. Certificate Manager usage is billed at 100% discount until the end of the Preview period.

This release of Certificate Manager adds support for target SSL proxies and the global external HTTP(S) load balancer (preview).

This is the initial Preview release of Certificate Manager.