20230808 - New rules for BasicConstraints extension value
As of September 5, 2023 DigiCert will stop issuing SSL certificates with the value "noncritical" for the BasicConstraints extension.
When it is present, the extension will have, by default, the value "critical".
Why?
This is a requirement for Certificate Authorities (CAs) such as DigiCert to comply with new industry standards.
What are the consequences for your existing certificates?
None. Certificates issued before September 5, 2023 will continue to function normally until they expire.
Note, however, that a reissuance will cause the value of the BasicConstraints extension to be set to "critical".
Do you need the basicConstraints "noncritical" extension?
In this case, submit your certificate requests before September 1st, 2023 and make sure to complete the DCV challenge as well as any request concerning the audit before September 5.