20201016 - Conformity of DigiCert certificates fields

DigiCert has announced a few hours ago that some of its certificates will have to be reissued in order to ensure their compliance to the reality.

The goal is to update ST (state) and / or L (location / city) fields that may have evolve since the original certificate issuance.

It impacts DigiCert, Thawte and Geotrust. They do not represent any security threat but the SSL certificate issuance standards requires their compliance.

Am I impacted and what do I need to do?

If so, you must have received a notification e-mail from DigiCert indicating the serial number of the certificate to be replaced.

In this case, you'll have to request your certificate to be reissued via its status page ("Request reissuance"). Those certificates will then have to be reinstalled. Note that a reissuance is totally free of charge.

And then what?

The certificates with non-compliant fields will be revoked as of October 20th at 20:00 French time (18:00 UTC). We advise you to make you requests as soon as possible.