Apple and Google have announced that from September 1, 2020 their browsers Safari and Chrome will trust SSL/TLS certificates with a maximum lifetime of 1 year (398 days) only. Therefor, from September 1, 2020, the Certificate Authorities are not able…
Comodo CA, the world’s largest commercial Certificate Authority, announced that the company is rebranding to Sectigo. The company unveiled its new name to limit market confusion and better represent the breadth and direction of its solutions, timed with the one-year…
To reissue your certificate (free of charge) please follow these steps: 1) Login End User Portal Please follow this link: https://products.geotrust.com/orders/orderinformation/authentication.do 2) Request Access You will receive the access link to the End User Portal by email 3) Start the…
This article is outdated. Please click here to read the current version: Deprecation of 2 year SSL/TLS Certificates As of March 2, 2017, the CA/Browser Forum, which sets the general guidelines for issuing SSL Certificates, has decided to limit the…
Who can apply for a code signing certificate ? A code signing certificate can be issued for natural persons (e.g. individual developers, sole traders) and registered companies and organizations (e.g. Ltd., Inc., LLC, associations, etc.). However, only Sectigo currently issued…
Overview In 2017, Google’s attention has been drawn to a series of questionable ssl certificates issued by Symantec’s PKI. Symantec’s PKI business, which operates a series of Certificate Authorities under various brand names, including Thawte, VeriSign, GeoTrust and RapidSSL, had…
Intermediate Certificates for Comodo, RapidSSL, GeoTrust and thawte certificates Please download the intermediate certificate for your product below: Globalsign AlphaSSL / AlphaSSL Wildcard Download Comodo Comodo Positive SSL / Positive SSL Wildcard / Positive SSL Multi-Domain Download Comodo Essential SSL…
In July 2012, the CA/Browser Forum, the industry standards board for Certificate Authorities and the browsers that use Certificates, made a decision to deprecate the usage of reserved IP addresses and internal names for certificates, effective November 1st 2015. All…
How to setup multiple domain names with SSL on one IP address What is SNI (Server Name Indication) ? Usually, an HTTPS server can only serve one domain (or small group of domains) per IP address for secured browsing. Since…
In this guide we will show you how to setup an SSL certificate for use with the Nginx web server on Debian Wheezy and enable Forward Secrecy for better security. The concept of Perfect Forward Secrecy (PFS) is the property…
