Browser developers, including Google, had raised questions about the way Symantec issued SSL certificates and have threatened to stop recognizing them, a move that could hurt Symantec’s customers and worry visitors to the websites using the affected certificates.
Now, Symantec has sold its Certificate Authority (CA) business to DigiCert. DigiCert addressed the issue of browser trust in Symantec certificates head-on in a short news release announcing the acquisition.
Over the next year, Google plans to issue warnings for more and more of the certificates issued under what it considers insecure processes.
Google’s Chrome team accepted a proposal from Symantec to reissue all certificates by Dec 1, 2017, linking them to a new root certificate held by an independent Managed Partner infrastructure.
Both Chrome and Mozilla have announced changing the level of trust provided to certificates issued by RapidSSL, Geotrust, Thawte, and Symantec.
These changes will require customers to reissue certificates.
SSL affected - (AccuWebHosting Customers)
Old SSL certificate
For the SSL issued earlier, you will see that the certificate is verified by GeoTrust Inc.
Reissued SSL certificate
Once we reissue the certificate, you will find it verified by DigiCert Inc.
Certificates Expiring before 15 March 2018
No action required at this time.
Certificates Expiring after 15 March 2018
Certificates issued (including reissues) before 1 June 2016 with expiry after 15 March 2018 should be reissued after 1st December 2017.
Certificates that expire between 1 January 2018 and 15 March 2018 should be renewed between these dates without losing any validity period.
Certificates issued (including reissues) after 1 June 2016 with an expiry beyond 13 September 2018 should be reissued, replaced, or renewed after 1 December 2017.
Certificates Expiring after 13 September 2018
Certificates issued (including reissues) prior to 1 December 2017 need to be reissued after 1 December 2017.
Certificates issued (including reissues) after 1 December 2017 require no action to be taken.
Actions required by AccuWeb Hosting Customers
AccuWeb Hosting customers do not need to do anything for now. We will begin the process from our end and advise you further via email.
If you have any questions feel free to write an email to [email protected]