20180424 - Update of the Digicert OCSP and CRL infrastructure
Digicert has announced an update of its OCSP and CRL infrastructure which should take place mid-June 2018.
Which products are concerned
This update only concerns Symantec, Thawte and Geotrust certificate issued before December 1st 2017 from the legacy hierarchy.
For certificates issued on or after 1 December 2017, no action pertaining to this update is necessary. These certificates were issued from the DigiCert root CA and are unaffected by this update.
What will you have to do?
Most of our customers won't have anything to do. The CRL infrastructure upgrade will be totally transparent.
PARTICULAR CASES: If your corporate firewall is configured to allow only a certain set of IP addresses to be accessed from their network, you'll need to add the new IP address to that list.
Warning: Do not replace the old IP addresses and existing rules for Symantec CRL IP addresses should not be deleted.
Test your access to the new IP addresses
The lists of new IP are available here:
To ensure connectivity is working, use
http://NewIPAddress /test.html