20200928 - Hierarchy error in DigiCert certificates issuance

Since August 24th, 2020 all DigiCert, Thawte and Geotrust SSL server certificates were issued in SHA1.

It is indeed possible to select a hierarchy for your certificate from the order or reissuance forms. 2 options are provided:

• "full SHA256" chain: end entity, intermediate and root certificates in SHA256
• "classical" chain: end entity and intermediate certificates in SHA256 and root certificate in SHA1.

But, due to a technical problem all certificates were issued by DigiCert in SHA1 no matter the hierarchy that had been previously selected.

Troubleshooting

Spotted on September25th, the issue has immediately been reported to DigiCert.

The authority could then reissue all standard SSL certificate on the right hierarchy.

EV certificates are currently being processed.