Reissue Certificates before Distrust Deadlines

Alerts ID:    ALERT2562    Updated:    04/03/2018

Severity

Urgent

Description

Many SSL/TLS certificates issued from the Symantec infrastructure will require re-issuance by certain deadlines to ensure continuity for your customers. Some certificates need attention immediately. Some can wait. The first deadline is 15 March 2018, which impacts only certificates issued before 1 June 2016 and expiring on/after 15 March 2018; it is strongly advised to reissue certificates within these dates as soon as possible to avoid risk or delays. Refer to our ongoing outreach for details about which certificates will be impacted by the upcoming deadline, or contact your account manager now. In advance of the remaining deadlines, we will continue outreach to you to specify which certificates are affected and when they need to be reissued. We will replace all affected certificates at no cost to you. Since certificates issued from the DigiCert root hierarchy are not impacted by these deadlines, you can continue to order and manage new certificates. Learn more.

 

Status

Browser community distrust plan

Browser Version released Action
Google 65

Beta: February 1st, 2018
Stable: March 6th, 2018

Distrusts the Symantec certs issued after Dec 1 2017
66 Beta: March 15th, 2018
Stable: April 17th, 2018
Distrusts the Symantec certs issued before Jun 1 2016
70 Beta: September 15th, 2018
Stable: October 16th, 2018
Distrusts all certs signed with Symantec hierarchy
 
Firefox 60

Beta: March 13th, 2018
Stable: May 9th, 2018

Distrusts the Symantec certs issued before Jun 1 2016
63 Beta: June 26th, 2018
Stable: October 16th, 2018
Distrusts all certs signed with Symantec hierarchy
 
Microsoft TBD    
 
Apple TBD    

Workaround

You can use our simple web-based tool to check whether any domain has a GeoTrust, RapidSSL, Symantec, or Thawte certificate and needs action related to upcoming releases of Google Chrome. The upcoming deadline for Chrome 66 distrust is approaching quickly, so we recommend taking action as soon as possible on any affected certificates.

https://www.websecurity.symantec.com/support/ssl-checker

Action Required

For certificates that require replacement, please submit for a free replacement ahead of the distrust dates mentioned above.

 

Resolution

Please use the links below to find instructions for each of the different platforms.

 

Brand Account Link
Symantec Symantec Trust Center (STC) Replacement Instructions
Symantec Trust Center Enterprise (STCE) Replacement Instructions
Managed PKI for SSL (MPKI SSL) Replacement Instructions
Reseller End User Portal Replacement Instructions
 
GeoTrust GeoTrust Security Center (GSC) Replacement Instructions
GeoTrust Security Center Enterprise (GSCE) Replacement Instructions
Reseller End User Portal Replacement Instructions
 
RapidSSL Reatail Security Center (RSC) Replacement Instructions
Reseller End User Portal Replacement Instructions
 
Thawte Thawte Certificate Center (TCC) Replacement Instructions
Thawte Certificate Center Enterprise (TCCE) Replacement Instructions
Reseller End User Portal Replacement Instructions

 

Contact Support

Find Answers


Search Tips