October 19, 2022
CertCentral Services API: Verified contact improvements
Starting October 19, 2022, DigiCert will require organizations on Code Signing (CS) and EV Code Signing (EV CS) certificate orders to have a verified contact.
DigiCert has always required a verified contact from the organization to approve code signing certificate orders before we issue the certificate. Today, DigiCert can add a verified contact to an organization during the validation process. After October 19, verified contacts must be submitted with the organization.
To make the transition easier, when you submit a request to the Order code signing certificate API endpoint, DigiCert will default to adding the authenticated user (the user who owns the API key in the request) as a verified contact for the organization.
DigiCert will apply this default when:
- The organization in the API request has no verified contacts who can approve CS or EV CS orders.
- The API request body does not specify a new verified contact to add to the organization.
- The authenticated user has a job title and phone number.
To avoid a lapse in service, make sure users in your CertCentral account with active API keys have a job title and phone number.
Learn more
July 9, 2022
Upcoming Schedule Maintenance
Some DigiCert services will be down for a total of 20 minutes during scheduled maintenance on July 9, 2022, 22:00 – 24:00 MDT (July 10, 2022, 04:00 – 06:00 UTC).
Infrastructure-related maintenance downtime
The services listed below will be down for a total of 20 minutes while we perform our infrastructure-related maintenance. The downtime consists of two 10-minute windows, one at the start and one at the end of the infrastructure-related work:
- Start: 22:00 – 22:10 MDT (UTC -6)
- End: 23:30 – 23:40 MDT (UTC -6)*
*The plan is to end our maintenance at approximately 23:30 MDT (UTC –6). However, if issues occur, we will need to end this work early, which means the second downtime may happen earlier than planned.
Affected services
CertCentral® / Services API
- Unable to access your CertCentral account.
- Services API will be unable to process requests.
- APIs will return a "503 Service is unavailable" error.
- Resubmit failed requests after services are restored.
CertCentral Automation / API
- Reschedule automation events around maintenance.
- If automation events cannot be rescheduled, retry failed events after services are restored.
Discovery / API
- Reschedule Discovery scans around maintenance.
- If scans cannot be rescheduled, retry failed scans after services are restored.
Direct Cert Portal / API
- Unable to access your Direct Cert Portal account
- Direct Cert Portal API will be unable to process requests.
- APIs will return a "503 Service is unavailable" error.
- Resubmit failed requests after services are restored.
QuoVadis® TrustLink® certificate issuance
- TrustLink certificate requests submitted during this time will be delayed
- Requests will be queued and processed after services are restored
PKI Platform 8 new domain and organization validation
- New domains submitted for validation during this time will be delayed.
- New organizations submitted for validation during this time will be delayed.
- Requests will be queued and processed after services are restored.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2022 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
May 7, 2022
Upcoming Schedule Maintenance
Update: There is no planned downtime during maintenance on May 7, MDT (May 8, UTC).
DigiCert will perform scheduled maintenance on May 7, 2022, between 22:00 – 24:00 MDT (May 8, 2022, between 04:00 – 06:00 UTC). Although we have redundancies to protect your services, some DigiCert services may be unavailable during this time.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- See the DigiCert 2022 maintenance schedule for maintenance dates and times.
Services will be restored as soon as we complete the maintenance.
April 2, 2022
Upcoming Schedule Maintenance
DigiCert will perform scheduled maintenance on April 2, 2022, between 22:00 – 24:00 MDT (April 3, 2022, between 04:00 – 06:00 UTC). During this time, some services may be down for up to two hours.
Note: Maintenance will be one hour earlier for those who don't observe daylight savings.
Infrastructure-related maintenance downtime
We will start this infrastructure-related maintenance at 22:00 MDT (04:00 UTC). Then the services listed below may be down for up to two hours.
CertCentral® TLS certificate issuance:
- TLS certificate requests submitted during this time will fail
- Failed requests should be resubmitted after services are restored
CIS and CertCentral® SCEP:
- Certificate Issuing Service (CIS) will be down
- CertCentral Simple Certificate Enrollment Protocol (SCEP) will be down
- Requests submitted during this time will fail
- CIS APIs will return a "503 Service is unavailable" error
- Failed requests should be resubmitted after services are restored
Direct Cert Portal new domain and organization validation:
- New domains submitted for validation during this time will fail
- New organizations submitted for validation during this time will fail
- Failed requests should be resubmitted after services are restored
QuoVadis® TrustLink® certificate issuance:
- TrustLink certificate requests submitted during this time will be delayed
- Requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored
PKI Platform 8 new domain and organization validation:
- New domains submitted for validation during this time will fail
- New organizations submitted for validation during this time will fail
- Requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored
- Access to User Authorization Agent (UAA) services will be disabled: both the UAA Admin and User web portals
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2022 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
March 5, 2022
Upcoming Schedule Maintenance
DigiCert will perform scheduled maintenance on March 5, 2022, between 22:00 – 24:00 MST (March 6, 2022, between 05:00 – 07:00 UTC). During this time, some services may be down for up to two hours.
Infrastructure-related maintenance downtime
We will start this infrastructure-related maintenance at 22:00 MST (05:00 UTC). Then the services listed below may be down for up to two hours.
CertCentral™ TLS certificate issuance:
- TLS certificate requests submitted during this time will fail
- Failed requests should be resubmitted after services are restored
CIS and CertCentral™ SCEP:
- Certificate Issuing Service (CIS) will be down
- CertCentral Simple Certificate Enrollment Protocol (SCEP) will be down
- Requests submitted during this time will fail
- CIS APIs will return a "503 Service is unavailable" error
- Failed requests should be resubmitted after services are restored
Direct Cert Portal new domain and organization validation:
- New domains submitted for validation during this time will fail
- New organizations submitted for validation during this time will fail
- Failed requests should be resubmitted after services are restored
QuoVadis™ TrustLink™ certificate issuance:
- TrustLink certificate requests submitted during this time will be delayed
- Requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored
PKI Platform 8 new domain and organization validation:
- New domains submitted for validation during this time will fail
- New organizations submitted for validation during this time will fail
- Requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2022 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
December 7, 2021
CertCentral Report Library now available
We are happy to announce the CertCentral Report Library is now available for CertCentral Enterprise and CertCentral Partner.* The Report Library is a powerful reporting tool that allows you to download more than 1000 records at a time. Use the Report Library to build, schedule, organize, and export reports to share and reuse.
The Report Library includes six customizable reports: Orders, Organizations, Balance history, Audit log, Domains, and Fully qualified domain names (FQDN). When building reports, you control the details and information that appear in the report, configure the columns and column order, schedule how often you want the report to run (once, weekly, or monthly), and choose the report format (CSV, JSON, or Excel). In addition, you receive notices when the report is ready for download in your account.
To build your first report:
- In your CertCentral account, in the main menu, select Reports*.
Note: To use the Report Library, you must be a CertCentral administrator. CertCentral Managers, Finance Managers, Standard Users, and Limited Users do not have access to Reports in their accounts. - On the Report library page, select Build a report.
To learn more about building reports:
*Note: Don't see the Report Library in your account? Contact your account manager or our support team for help.
CertCentral Report Library API also available
We're pleased to announce the release of the CertCentral Report Library API! This new API service makes it possible to leverage key features of the Report Library in your CertCentral API integrations, including building reports and downloading report results*.
See our Report Library API documentation to learn more about including the Report Library in your API integrations.
*Note: To use the CertCentral Report Library API, Report Library must be enabled for your CertCentral account. For help activating the Report Library, contact your account manager or our support team.
Bugfix: Unique organization name check did not include assumed name
We updated our unique organization name check to include the assumed name (doing business as name) when creating an organization.
Before, in CertCentral and the CertCentral Services API, when you tried to create an organization with the same name as an existing organization, we returned an error and would not let you create the organization, even if the assumed name (DBA) was different.
Now, when you create an organization, we include the assumed name in the unique organization check. Therefore, you can create organizations with the same name, as long as each organization has a unique assumed name.
For example:
- First organization: No assumed name
- Name: YourOrganization
- Assumed name:
- Second organization: Name plus unique assumed name
- Name: YourOrganization
- Assumed name: OrganizationAssumedName
Creating organizations
In CertCentral and the CertCentral Services API, you can create an organization to submit for prevalidation or when you order a TLS/SSL certificate. This change applies to both processes.
CertCentral: DigiCert now issues client certificates from the DigiCert Assured ID Client CA G2 intermediate CA certificate
To remain compliant with industry standards, DigiCert had to replace the intermediate CA (ICA) certificate used to issue CertCentral client certificates.
CertCentral client certificate profiles that used the DigiCert SHA2 Assured ID CA intermediate CA certificate now use the DigiCert Assured ID Client CA G2 intermediate CA certificate. This change also changes the root certificate from DigiCert Assured ID Root CA to DigiCert Assured ID Root G2.
Old ICA and root certificates
- (ICA) DigiCert SHA2 Assured ID CA
- (Root) DigiCert Assured ID Root CA
New ICA and root certificates
- (ICA) DigiCert Assured ID Client CA G2
- (Root) DigiCert Assured ID Root G2
For more information, see DigiCert ICA Update. To download a copy of the new intermediate CA certificate, see DigiCert Trusted Root Authority Certificates.
Do you still need your client certificate to chain to the DigiCert Assured ID Root CA certificate? Contact your account representative or DigiCert Support.
December 2, 2020
CertCentral Services API: Documentation updates
We're pleased to announce the following updates to the documentation for the CertCentral Services API:
- New Voucher price estimate API
We published a new reference topic for the Voucher price estimate endpoint. Customers who use vouchers can use this endpoint to estimate the cost (including tax) of an order for specific voucher configurations. - Updated API Glossary
We updated the Glossary with a new table to define the different organization validation status values. See Glossary – Organization validation statuses. - Added request parameter to Update account emails documentation
We added theemergency_emailsrequest parameter to the documentation for the Update account emails endpoint. Use this parameter to update the email addresses that receive emergency notifications from DigiCert.
Example Update account emails request body:
- Added response parameters to the Product info documentation
We added thevalidation_type,allowed_ca_certs, anddefault_intermediateresponse parameters to the documentation for the Product info endpoint.- Use the
validation_typeparameter to get the validation type for a given product. - Use the
allowed_ca_certsparameter to get information about the ICA certificates you can select when you order a given product. * - Use the
default_intermediateparameter to get the ID of the default ICA for a given product. *
- Use the
Example Product info response data:
* Note: The Product info endpoint only returns the allowed_ca_certs and default_intermediates parameters for products that support ICA selection. For public SSL certificates that support ICA selection (OV and EV flex certificates), these parameters are only returned if ICA selection is enabled for the account. Additionally, the default_intermediates parameter is only returned if an administrator has customized a product setting for a division or user role in the account. For more information, see ICA certificate chain option for public OV and EV flex certificates.
September 25, 2019
We added two new statuses to the Organizations and Organization details pages: validation expires soon, and validation expired. These new statuses make it easier to proactively track your organization validations and make sure they stay up to date.
Now, when you visit the Organizations page (in the sidebar menu click Certificates > Organizations), you can quickly identify organizations with validation that is expiring soon or has already expired. For more details about the expiring or expired organization validation, click the organization name.
We fixed a bug where some accounts were unable to submit organizations for EV CS – Code Signing Organization Extended Validation. The affected accounts only contained EV Code Signing and Code Signing products.
As part of the fix, we split up the EV and EV CS verified contact options. Now, when submitting an organization for EV CS – Code Signing Organization Extended Validation, you can submit the organization's verified contact for EV CS order approvals only. Similarly, when submitting an organization for EV – Extended Organization Validation (EV), you can submit the organization's verified contact for EV SSL certificate order approvals only.
Note: For EV code signing certificate orders, organizations and the organization's verified contacts need to be pre-validated. For more information about organization pre-validation, see our Submit an organization for pre-validation instructions.
January 31, 2019
We enhanced the Order # details page for pending OV SSL and EV SSL certificate orders. In the DigiCert Needs To section, under Verify Organization Details, we now list the steps that need to be completed to validate the organization (e.g., complete Place of Business Verification) along with the status for each step: complete or pending.
Previously, we provided only a high-level overview of the organization validation process – Verify Organization Details – without offering any details as to what steps needed to be completed before the organization was fully validated.
We fixed a bug on the forms in CertCentral where the state/province/territory field appeared as being required when the country selected didn't require that information (for example when adding a new organization or a credit card).
Note: This bug didn't prevent you from completing these transactions. For example, you were still able to add an organization or a credit card with or without filling in the state/province/territory field.
Now, in the forms, the state/province/territory field is labeled as optional for countries that don't require this information as part of their transactions.
Note: US and Canada are the only countries that require you to add a state or province/territory.