Skip to main content

DigiCert Revocation Incident


dips
Forum|alt.badge.img+7
  • Veeam Legend
  • 808 comments

Hi All, 

Something to be aware of if utilising DigiCert for Certificates.

Essentially:

DigiCert is warning that it will be mass-revoking SSL/TLS certificates due to a bug in how the company verified if a customer owned or operated a domain and requires impacted customers to reissue certificates within 24 hours.

Further info:

Worth checking if your Certs will need to be replaced by logging into the CertCentral portal.

11 comments

Link State
Forum|alt.badge.img+11
  • Veeam Legend
  • 608 comments
  • July 31, 2024

thx @dips 😘

thanks we knew, a nightmare changed certificates on many balancers and sites. 😤 😥😋


Chris.Childerhose
Forum|alt.badge.img+21
  • Veeam Legend, Veeam Vanguard
  • 8494 comments
  • July 31, 2024

Time to check my SSLs as I think I use some from here, but cannot remember.  Thanks for sharing this one Dips.

 
 
 

coolsport00
Forum|alt.badge.img+20
  • Veeam Legend
  • 4139 comments
  • July 31, 2024

Thanks for sharing @dips . We do need to renew our certs, and do use them, but we aren’t scheduled to renew until Sept. And, our previous cert was from mid-last year. So I think we’re good.


coolsport00
Forum|alt.badge.img+20
  • Veeam Legend
  • 4139 comments
  • July 31, 2024

Oh, just now read...I see that it goes back 5 yrs?? Hmm..well, since we will be renewing in about a month...I think we’ll be ok 😊


dips
Forum|alt.badge.img+7
  • Author
  • Veeam Legend
  • 808 comments
  • July 31, 2024
Link State wrote:

thx @dips 😘

thanks we knew, a nightmare changed certificates on many balancers and sites. 😤 😥😋

Yep, it’s not great when they are going to end up being revoked in such a short period


dips
Forum|alt.badge.img+7
  • Author
  • Veeam Legend
  • 808 comments
  • July 31, 2024
Chris.Childerhose wrote:

Time to check my SSLs as I think I use some from here, but cannot remember.  Thanks for sharing this one Dips.

 
 
 

Welcome!


dips
Forum|alt.badge.img+7
  • Author
  • Veeam Legend
  • 808 comments
  • July 31, 2024
coolsport00 wrote:

Thanks for sharing @dips . We do need to renew our certs, and do use them, but we aren’t scheduled to renew until Sept. And, our previous cert was from mid-last year. So I think we’re good.

It’s worth checking the DigiCert CertCentral portal and see which ones are affected. DigiCert will revoke the existing ones soon which means CAs and Browsers, for example, will no longer trust the affected Certificates 


coolsport00
Forum|alt.badge.img+20
  • Veeam Legend
  • 4139 comments
  • July 31, 2024

Yeah...just in case I sent the info to my Director who has access to the portal. We’ll see what he says/does 😊


dips
Forum|alt.badge.img+7
  • Author
  • Veeam Legend
  • 808 comments
  • July 31, 2024

Hope your org is not affected @coolsport00 

It’s a very small subset affected but at scale it’s quite a few thousands of Certs


Dynamic
Forum|alt.badge.img+10
  • Veeam Vanguard
  • 383 comments
  • August 1, 2024

Thanks @dips for sharing this info. I know we have also some customers running with DigiCert, will inform my colleagues about it.


dips
Forum|alt.badge.img+7
  • Author
  • Veeam Legend
  • 808 comments
  • August 2, 2024
Dynamic wrote:

Thanks @dips for sharing this info. I know we have also some customers running with DigiCert, will inform my colleagues about it.

Welcome, hope there was not much impact


Comment