20240322 - Necessary reissuance of Certigna SSL certificates
Certigna recently discovered that SSL certificates it issued between September 15, 2023 and March 4, 2024 had an error in the "Basic Constraint" extension which was not marked "Critical".
After study, the CA/B Forum finally decided (on 03/21/2024) that the certificates concerned must be revoked before March 26, 2024.
What should be done?
If you are concerned, then you must urgently submit a reissue for each of the impacted certificates.
These reissuances will require a new CSR as well as a new DCV validation.
HOWEVER, YOU WILL NOT BE ASKED TO RE-PROVIDE THE AUDIT DOCUMENTS.
When?
Reissuances must be requested before certificates are revoked. Ideally today and no later than Monday.
The revocations should be effective Tuesday March 26 around 5:00 p.m. (to be confirmed).
How to do that?
Go to the status page of the certificates concerned and click on the "Remanufacturing actions" > "Request certificate remanufacturing" button.
Is there a cost?
No. This is a completely free operation. Note that exceptionally, it is possible to request the reissaunce of certificates issued more than 3 months ago.
What are the risks of late reissuance?
Revocation may result in malfunction or unavailability of sites protected by the certificate(s) if the latter were not updated before revocation.
Are you impacted?
Customers with this type of certificate will be quickly contacted by email. Those with a customer account will have access to the list of impacted certificates from their home page.
Progress
At 6:30pm on Friday 22 March, 5% of our reissues have been delivered and 58% have been processed and with our supplier.
At 1pm on Saturday 23 March, 13% of our reissues have been delivered, and we are still waiting for 15% of our customers' reissue requests.
At 4pm CET on Saturday 23 March, 48% of our reissues have been delivered, 36% have been processed and are with our supplier, and we are still waiting for 15% of our customers' reissue requests.
At 9am CET on Monday 25 March, 48% of our reissues have been delivered, 37% have been processed and are with our supplier, and we are still waiting for 15% of our customers' reissue requests.
At 2pm CET on Monday 25 March, 48% of our reissues have been delivered, 42% have been processed and are with our supplier, and we are still waiting for 10% of our customers' reissue requests.
At 6pm CET on Monday 25 March, 92% of our reissues have been delivered, 0.5% have been processed and are with our supplier, and we are still waiting for 7.5% of our customers' reissue requests.
At 12 noon CET on Tuesday 26 March, 97% of our reissues have been delivered, 1.1% have been processed and are with our supplier, and we are still waiting for 1.9% of our customers' reissue requests.
At 10pm on Tuesday 26 March, mis-issued certificates were revoked.