12月 31, 2022
DIGICERT 2022 MAINTENANCE SCHEDULE
To make it easier to plan your certificate-related tasks, we scheduled our 2022 maintenance windows in advance. See DigiCert 2022 scheduled maintenance—this page is updated with all current maintenance schedule information.
With customers worldwide, we understand there is not a "best time" for everyone. However, after reviewing the data on customer usage, we selected times that would impact the fewest amount of our customers.
About our maintenance schedule
- Maintenance is scheduled for the first weekend of each month unless otherwise noted.
- Each maintenance window is scheduled for 2 hours.
- Although we have redundancies to protect your service, some DigiCert services may be unavailable.
- All normal operations will resume once maintenance is completed.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
If you need more information regarding these maintenance windows, contact your account manager or DigiCert support team.
5月 7, 2022
Upcoming Schedule Maintenance
Update: There is no planned downtime during maintenance on May 7, MDT (May 8, UTC).
DigiCert will perform scheduled maintenance on May 7, 2022, between 22:00 – 24:00 MDT (May 8, 2022, between 04:00 – 06:00 UTC). Although we have redundancies to protect your services, some DigiCert services may be unavailable during this time.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- See the DigiCert 2022 maintenance schedule for maintenance dates and times.
Services will be restored as soon as we complete the maintenance.
4月 18, 2022
CertCentral: Multi-year Plans are now available for Verified Mark Certificates
We are happy to announce that Multi-year Plans are now available for Verified Mark Certificates (VMCs) in CertCentral and CertCentral Services API.
DigiCert® Multi-year Plans allow you to pay a single discounted price for up to six years of Verified Mark Certificate coverage. With a Multi-year Plan, you pick the duration of coverage you want (up to six years). Until the plan expires, you reissue your certificate at no cost each time it reaches the end of its validity period.
Note: Depending on the length of your plan, you may need to revalidate your domain and organization multiple times during your Multi-year Plan.
Multi-year Plans for VMC in the Services API
In the Services API, when you submit an order request for a VMC, use the order_validity object to set the duration of coverage for your Multi-year Plan (1-6 years). For more information, see:
What is a Verified Mark Certificate?
Verified Mark Certificates (VMCs) are a new type of certificate that allows companies to place a certified brand logo next to the “sender” field in customer inboxes.
- Your logo is visible before the message is opened.
- Your logo acts as confirmation of your domain’s DMARC status and your organization’s authenticated identity.
4月 11, 2022
CertCentral Services API: Domain locking API endpoints
DigiCert is happy to announce our domain locking feature is now available in the CertCentral Services API.
Note: Before you can use the domain locking endpoints, you must first enable domain locking for your CertCentral account. See Domain locking – Enable domain locking for your account.
New API endpoints
- Activate domain locking
Activate domain locking for a given domain. - Deactivate domain locking
Deactivate domain locking for a given domain. - Check CAA (domain lock)
Check a given domain's DNS CAA resource record for a domain lock account token.
Updated API endpoints
We updated the response for the Domain info and List domains endpoints to include the following parameters with domain lock details:
domain_locking_status(string)
Domain lock status. Only returned if domain locking is enabled for the account.account_token(string)
Domain lock account token. Only returned if domain locking is enabled for the account, and if domain locking has been activated for the domain at least once.
To learn more, see:
4月 5, 2022
CertCentral: Domain locking is now available
DigiCert is happy to announce our domain locking feature is now available.
Does your company have more than one CertCentral account? Do you need to control which of your accounts can order certificates for specific company domains?
Domain locking allows you to control which of your CertCentral accounts can order certificates for your domains.
How does domain locking work?
DNS Certification Authority Authorization (CAA) resource records allow you to control which certificate authorities can issue certificates for your domains.
With domain locking, you can use this same CAA resource record to control which of your company's CertCentral accounts can order certificates for your domains.
How do I lock a domain?
To lock a domain:
- Enable domain locking for your account.
- Set up domain locking for a domain.
- Add the domain's unique verification token to the domain's DNS CAA resource record.
- Check the CAA record for the unique verification token.
To learn more, see:
End of life for account upgrades from Symantec, GeoTrust, Thawte or RapidSSL to CertCentral™
From April 5, 2022, MDT, you can no longer upgrade your Symantec, GeoTrust, Thawte, or RapidSSL account to CertCentral™.
If you haven't already moved to DigiCert CertCentral, upgrade now to maintain website security and have continued access to your certificates.
Note: During 2020, DigiCert discontinued all Symantec, GeoTrust, Thawte, RapidSSL admin consoles, enrollment services, and API services.
How do I upgrade my account?
To upgrade your account, contact DigiCert Support immediately. For more information about the account upgrade process, see Upgrade from Symantec, GeoTrust, Thawte, or RapidSSL.
What happens if I don't upgrade my account to CertCentral?
After April 5, 2022, you must get a new CertCentral account and manually add all account information, such as domains and organizations. In addition, you won't be able to migrate any of your active certificates to your new account.
For help setting up your new CertCentral account after April 5, 2022, contact DigiCert Support.
4月 2, 2022
Upcoming Schedule Maintenance
DigiCert will perform scheduled maintenance on April 2, 2022, between 22:00 – 24:00 MDT (April 3, 2022, between 04:00 – 06:00 UTC). During this time, some services may be down for up to two hours.
Note: Maintenance will be one hour earlier for those who don't observe daylight savings.
Infrastructure-related maintenance downtime
We will start this infrastructure-related maintenance at 22:00 MDT (04:00 UTC). Then the services listed below may be down for up to two hours.
CertCentral® TLS certificate issuance:
- TLS certificate requests submitted during this time will fail
- Failed requests should be resubmitted after services are restored
CIS and CertCentral® SCEP:
- Certificate Issuing Service (CIS) will be down
- CertCentral Simple Certificate Enrollment Protocol (SCEP) will be down
- Requests submitted during this time will fail
- CIS APIs will return a "503 Service is unavailable" error
- Failed requests should be resubmitted after services are restored
Direct Cert Portal new domain and organization validation:
- New domains submitted for validation during this time will fail
- New organizations submitted for validation during this time will fail
- Failed requests should be resubmitted after services are restored
QuoVadis® TrustLink® certificate issuance:
- TrustLink certificate requests submitted during this time will be delayed
- Requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored
PKI Platform 8 new domain and organization validation:
- New domains submitted for validation during this time will fail
- New organizations submitted for validation during this time will fail
- Requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored
- Access to User Authorization Agent (UAA) services will be disabled: both the UAA Admin and User web portals
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2022 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
3月 30, 2022
CertCentral: Bulk domain revalidation is now available
DigiCert is happy to announce our bulk domain validation feature is now available. Don't spend extra time submitting one domain at a time for revalidation. Use our bulk domain revalidation feature to submit 2 to 25 domains at a time for revalidation.
Remember, domain validation is only valid for 397 days. To maintain seamless certificate issuance, DigiCert recommends completing domain control validation (DCV) ahead of time before the domain's validation expires.
Note: Currently, the bulk domain feature only supports the email DCV method. To use a different DCV method, you'll need to submit each domain individually.
See for yourself
- In your CertCentral account, in the left main menu, go to Certificates > Domains.
- On the Domains page, select the domains you want to submit for revalidation.
- In the Submit domains for revalidation dropdown, select Submit domains for email-based validation.
3月 28, 2022
Starting March 28, 2022, all public S/MIME certificates will have a maximum validity period of 1,185 days. This change is to align with Apple policy updates and only applies to publicly trusted S/MIME certificates newly issued from CertCentral. Certificates issued before March 28 are not affected.
3月 10, 2022
CertCentral: DNS CNAME DCV method now available for DV certificate orders
In CertCentral and the CertCentral Services API, you can now use the DNS CNAME domain control validation (DCV) method to validate the domains on your DV certificate order.
Note: Before, you could only use the DNS CNAME DCV method to validate the domains on OV and EV certificate orders and when prevalidating domains.
To use the DNS CNAME DCV method on your DV certificate order:
- In CertCentral:
- When ordering a DV TLS certificate, you can select DNS CNAME as the DCV method.
- On the DV TLS certificate's order details page, you can change the DCV method to DNS CNAME Record.
- In the Services API:
- When requesting a DV TLS certificate, set the value of the dcv_method request parameter to dns‑cname‑token.
Note: The AuthKey process for generating request tokens for immediate DV certificate issuance does not support the DNS CNAME DCV method. However, you can use the File Auth (http‑token) and DNS TXT (dns‑txt‑token) DCV methods. To learn more, visit DV certificate immediate issuance.
To learn more about using the DNS CNAME DCV method:
- For CertCentral:
- For the Services API:
3月 5, 2022
Upcoming Schedule Maintenance
DigiCert will perform scheduled maintenance on March 5, 2022, between 22:00 – 24:00 MST (March 6, 2022, between 05:00 – 07:00 UTC). During this time, some services may be down for up to two hours.
Infrastructure-related maintenance downtime
We will start this infrastructure-related maintenance at 22:00 MST (05:00 UTC). Then the services listed below may be down for up to two hours.
CertCentral™ TLS certificate issuance:
- TLS certificate requests submitted during this time will fail
- Failed requests should be resubmitted after services are restored
CIS and CertCentral™ SCEP:
- Certificate Issuing Service (CIS) will be down
- CertCentral Simple Certificate Enrollment Protocol (SCEP) will be down
- Requests submitted during this time will fail
- CIS APIs will return a "503 Service is unavailable" error
- Failed requests should be resubmitted after services are restored
Direct Cert Portal new domain and organization validation:
- New domains submitted for validation during this time will fail
- New organizations submitted for validation during this time will fail
- Failed requests should be resubmitted after services are restored
QuoVadis™ TrustLink™ certificate issuance:
- TrustLink certificate requests submitted during this time will be delayed
- Requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored
PKI Platform 8 new domain and organization validation:
- New domains submitted for validation during this time will fail
- New organizations submitted for validation during this time will fail
- Requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2022 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
2月 17, 2022
CertCentral: Improved verified contact EV TLS certificate request approval process
In CertCentral and the CertCentral Services API, we updated the EV TLS certificate request process to only send the EV TLS request approval emails to the verified contacts you include on the certificate request.
Note: Before, when you requested an EV TLS certificate, we sent the EV order approval email to all the verified contacts for the organization.
Add verified contacts to an EV TLS certificate request:
- CertCentral
When requesting an EV TLS certificate, you can:- Keep the existing verified contacts assigned to the organization
- Remove contacts (at least one is required)
- Add new contacts (we must validate each new contact, which may delay certificate issuance).
- Services API
When requesting an EV TLS certificate, include the verified contacts in theorganization.contactsarray of the JSON request. For verified contacts, the value of thecontact_typefield isev_approver.
To learn more about EV TLS certificate requests:
- For CertCentral, see Order an EV SSL/TLS certificate.
- For Services API, see Order Basic EV, Order Secure Site EV, and Order Secure Site Pro EV.
2月 8, 2022
Account Security Feature: Approved User Email Domains
CertCentral Administrators can now specify what email domains users can create a CertCentral account for. This helps prevent emails from being sent to non-approved, generic email domains (@gmail.com, @yahoo.com), or domains owned by third parties. If a user attempts to set or change a user email address to a non-approved domain, they receive an error.
Find this setting in Settings > Preferences. Expand Advanced Settings, and look for the Approved email domains section.
Note: This does not affect existing users with non-approved email addresses. It only impacts new users and email changes made after configuring this setting.
2月 1, 2022
Verified Mark Certificates (VMC): Three new approved trademark offices
We are happy to announce that DigiCert now recognizes three more intellectual property offices for verifying the logo for your VMC certificate. These new offices are in Korea, Brazil, and India.
New approved trademark offices:
- Korean Intellectual Property Office
- Instituto Nacional da Propriedade Industrial
- Intellectual Property India
Other approved trademark offices:
- United States Patent and Trademark Office (USPTO)
- Canadian Intellectual Property Office
- European Union Intellectual Property Office
- UK Intellectual Property Office
- Deutsches Patent- und Markenamt
- Japan Trademark Office
- Spanish Patent and Trademark Office O.A.
- IP Australia
What is a Verified Mark Certificate?
Verified Mark Certificates (VMCs) are a new type of certificate that allows companies to place a certified brand logo next to the “sender” field in customer inboxes.
- Your logo is visible before the message is opened.
- Your logo acts as confirmation of your domain’s DMARC status and your organization’s authenticated identity.
Bugfix: Code Signing (CS) certificate generation email sent only to CS verified contact
We fixed a bug in the Code Signing (CS) certificate issuance process where we were sending the certificate generation email to only the CS verified contact. This bug only happened when the requestor did not include a CSR with the code signing certificate request.
Now, for orders submitted without a CSR, we send the code signing certificate generation email to:
- Certificate requestor
- CS verified contact
- Additional emails included with the order
Note: DigiCert recommends submitting a CSR with your Code Signing certificate request. Currently, Internet Explorer is the only browser that supports keypair generation. See our knowledgebase article: Keygen support dropped with Firefox 69.
1月 24, 2022
Improved Domains page, Validation status filter—Completed / Validated
On the Domains page, in the Validation status dropdown, we updated the Completed / Validated filter to make it easier to find domains with completed and active domain control validation (DCV).
Note: Before, when you searched for domains with Completed / Validated DCV, we returned all domains with completed DCV even if the domain validation had expired.
Now, when you search for domains with Completed / Validated DCV, we only return domains with completed and active DCV in your search results. To find domains with expired DCV, use the Expired filter in the Validation status dropdown.
Find domains with completed and active DCV
- In CertCentral, in the left main menu, go to Certificates > Domains.
- On the Domains page, in the Validation status dropdown, select Completed / Validated.
CertCentral Services API: List domains enhancement
For the List domains API, we updated the filters[validation]=completed filter to make it easier to find domains validated for OV or EV certificate issuance.
Before, this filter returned all domains with completed DCV checks, even if the domain validation had expired. Now, the filter only returns domains with an active OV or EV domain validation status
1月 10, 2022
CertCentral Domains and Domain details pages: Improved domain validation tracking
We updated the Domains and Domain details pages to make it easier to track and keep your domains' validation up to date. These updates coincide with last year's industry changes to the domain validation reuse period*. Keeping your domain validation current reduces certificate issuance times: new, reissue, duplicate issues, and renewals.
*Note: On October 1, 2021, the industry reduced all domain validation reuse periods to 398 days. DigiCert implemented a 397-day domain validation reuse period to ensure certificates aren't issued using expired domain validation. For more information about this change, see our knowledge base article, Domain validation policy changes in 2021.
Domains page improvements
When you visit the Domains page (in the left main menu, select Certificates > Domains), you will see three new columns: DCV method, Validation status, and Validation expiration. Now you can view the domain control validation (DCV) method used to demonstrate control over the domain, the status of the domain's validation (pending, validated, expires soon, and expired), and when the domain validation will expire.
Because OV and EV validation reuse periods are the same, we streamlined the Validation status sorting feature. Instead of showing separate filters for OV validation and EV validation, we only show one set of filters:
- Completed / Validated
- Pending validation
- Expires in 0 - 7 days
- Expires in 0 - 30 days
- Expires in 31 - 60 days
- Expires in 61 - 90 days
- Expired
Domain details page improvements
When you visit a domain's details page (on the Domains page, select a domain), you will now see a status bar at the top of the page. This status bar lets you view the domain's validation status, when the domain's validation expires, when the domain's validation was most recently completed, and the DCV method used to demonstrate control over the domain.
We also updated the Domain validation status section of the page. We replaced the separate entries for OV and EV domain validation statuses with one entry: domain validation status.
1月 8, 2022
Upcoming Scheduled Maintenance
DigiCert will perform scheduled maintenance on January 8, 2022, between 22:00 – 24:00 MST (January 9, 2022, between 05:00 – 07:00 UTC). Although we have redundancies to protect your service, some DigiCert services may be unavailable during this time.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- If you use the APIs for immediate certificate issuance and automated tasks, expect interruptions.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2022 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
12月 4, 2021
Upcoming Scheduled Maintenance
DigiCert will perform scheduled maintenance on December 4, 2021, between 22:00 – 24:00 MST (December 5, 2021, between 05:00 – 07:00 UTC). Although we have redundancies to protect your service, some DigiCert services may be unavailable during this time.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
11月 16, 2021
Industry changes to file-based DCV (HTTP Practical Demonstration, file auth, file, HTTP token, and HTTP auth)
To comply with new industry standards for the file-based domain control validation (DCV) method, you can only use the file-based DCV to demonstrate control over fully qualified domain names (FQDNs), exactly as named.
To learn more about the industry change, see Domain validation policy changes in 2021.
How does this affect me?
As of November 16, 2021, you must use one of the other supported DCV methods, such as Email, DNS TXT, and CNAME, to:
- Validate wildcard domains (*.example.com)
- To include subdomains in the domain validation when validating the higher-level domain. For example, if you want to cover www.example.com, when you validate the higher-level domain, example.com.
- Prevalidate entire domains and subdomains.
To learn more about the supported DCV method for DV, OV, and EV certificate requests:
CertCentral: Pending certificate requests and domain prevalidation using file-based DCV
Pending certificate request
If you have a pending certificate request with incomplete file-based DCV checks, you may need to switch DCV methods* or use the file-based DCV method to demonstrate control over every fully qualified domain name, exactly as named, on the request.
*Note: For certificate requests with incomplete file-based DCV checks for wildcard domains, you must use a different DCV method.
To learn more about the supported DCV methods for DV, OV, and EV certificate requests:
- Supported DCV methods for validating domains on certificate OV and EV certificate requests
- Supported DCV methods for validating the domains on DV SSL certificate orders
Domain prevalidation
If you plan to use the file-based DCV method to prevalidate an entire domain or entire subdomain, you must use a different DCV method.
To learn more about the supported DCV methods for domain prevalidation, see Supported domain control validation (DCV) methods for domain prevalidation.
CertCentral Services API
If you use the CertCentral Services API to order certificates or submit domains for prevalidation using file-based DCV (http-token), this change may affect your API integrations. To learn more, visit File-based domain control validation (http-token).
11月 6, 2021
Upcoming Schedule Maintenance
DigiCert will perform scheduled maintenance on November 6, 2021, between 22:00 – 24:00 MDT (November 7, 2021, between 04:00 – 06:00 UTC).
CertCentral infrastructure-related maintenance downtime
We will start this infrastructure-related maintenance between 22:00 and 22:10 MDT (04:00 and 04:10 UTC). Then, for approximately 30 minutes, the following services will be down:
DV certificate issuance for CertCentral, ACME, and ACME agent automation
- DV certificate requests submitted during this time will fail
- APIs will return a "cannot connect" error
- Failed requests should be resubmitted after services are restored
CIS and SCEP
- Certificate Issuing Service (CIS) will be down
- Simple Certificate Enrollment Protocol (SCEP) will be down
- DigiCert will be unable to issue certificates for CIS and SCEP
- APIs will return a "cannot connect" error
- Requests that return "cannot connect" errors should be resubmitted after services are restore
QuoVadis TrustLink certificate issuance
- TrustLink certificate requests submitted during this time will fail
- However, failed requests will be added to a queue for processing later
- Queued-up requests will be processed after services are restored, as required
This maintenance only affects DV certificate issuance, CIS, SCEP, and TrustLink certificate issuance. It does not affect any other DigiCert platforms or services .
PKI Platform 8 maintenance
We will start the PKI Platform 8 maintenance at 22:00 MDT (04:00 UTC). Then, for approximately 30 minutes, the PKI Platform 8 will experience service delays and performance degradation that affect:
- Signing in and using your PKI Platform 8 to perform in-console certificate lifecycle tasks.
- Using any of your PKI Platform 8 corresponding APIs or protocols (for example, SOAP, REST, SCEP, and EST) to perform certificate lifecycle operations.
- Performing certificate lifecycle tasks/operations:
- Enrolling certificates: new, renew, or reissues
- Adding domains and organizations
- Submitting validation requests
- Viewing reports, revoking certificates, and creating profiles
- Adding users, viewing certificates, and downloading certificates
- Certificate issuance for PKI Platform 8 and its corresponding API.
Additionally:
- APIs will return a "cannot connect" error.
- Certificate enrollments that receive "cannot connect" errors must be resubmitted after DigiCert restores services.
The PKI Platform 8 maintenance only affects PKI Platform 8. It does not affect any other DigiCert platforms or services.
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
10月 2, 2021
Upcoming Schedule Maintenance
On October 2, 2021, between 22:00 – 24:00 MDT (October 3, 2021, between 04:00 – 06:00 UTC), DigiCert will perform scheduled maintenance.
CertCentral, CIS, SCEP, Direct Cert Portal, and DigiCert ONE maintenance
DigiCert will perform scheduled maintenance. Although we have redundancies to protect your service, some DigiCert services may be unavailable during this time.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
PKI Platform 8 maintenance and downtime:
DigiCert will perform scheduled maintenance on PKI Platform 8. During this time, the PKI Platform 8 and its corresponding APIs will be down for approximately 20 minutes.
We will start the PKI Platform 8 maintenance at 22:00 MDT (04:00 UTC).
Then, for approximately 20 minutes:
- You will be unable to sign in and use your PKI Platform 8 to perform in-console certificate lifecycle tasks.
- You will be unable to use any of your PKI Platform 8 corresponding APIs or protocols (for example, SOAP, REST, SCEP, and EST) to perform certificate lifecycle operations.
- You will be unable to:
- Enroll certificates: new, renew, or reissues
- Add domains and organizations
- Submit validation requests
- View reports, revoke certificates, and create profiles
- Add users, view certificates, and download certificates
- DigiCert will be unable to issue certificates for PKI Platform 8 and its corresponding API.
- APIs will return a "cannot connect" error.
- Certificate enrollments that receive "cannot connect" errors must be resubmitted after DigiCert restores services.
The PKI Platform 8 maintenance only affects PKI Platform 8. It does not affect any other DigiCert platforms or services.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
9月 11, 2021
Upcoming Schedule Maintenance
On September 11, 2021, between 22:00 – 24:00 MDT (September 12, 2021, between 04:00 – 06:00 UTC), DigiCert will perform scheduled maintenance.
CertCentral, CIS, SCEP, Direct Cert Portal, and DigiCert ONE maintenance
DigiCert will perform scheduled maintenance. Although we have redundancies to protect your service, some DigiCert services may be unavailable during this time.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
PKI Platform 8 maintenance and downtime:
DigiCert will perform scheduled maintenance on PKI Platform 8. During this time, the PKI Platform 8 and its corresponding APIs will be down for approximately 60 minutes.
We will start the PKI Platform 8 maintenance at 22:00 MDT (04:00 UTC).
Then, for approximately 60 minutes:
- You will be unable to sign in and use your PKI Platform 8 to perform in-console certificate lifecycle tasks.
- You will be unable to use any of your PKI Platform 8 corresponding APIs or protocols (for example, SOAP, REST, SCEP, and EST) to perform certificate lifecycle operations.
- You will be unable to:
- Enroll certificates: new, renew, or reissues
- Add domains and organizations
- Submit validation requests
- View reports, revoke certificates, and create profiles
- Add users, view certificates, and download certificates
- DigiCert will be unable to issue certificates for PKI Platform 8 and its corresponding API.
- APIs will return a "cannot connect" error.
- Certificate enrollments that receive "cannot connect" errors must be resubmitted after DigiCert restores services.
The PKI Platform 8 maintenance only affects PKI Platform 8. It does not affect any other DigiCert platforms or services.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance begins and when it ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete our maintenance.
9月 7, 2021
CertCentral Services API: Get orders by alternative order ID
We created a new endpoint to make it easier to get certificate order details using alternative order IDs: Get orders by alternative order ID. This endpoint returns the order ID, certificate ID, and order status of certificate orders with the alternative_order_id you provide in the URL path.
8月 7, 2021
Upcoming Schedule Maintenance
On August 7, 2021, between 22:00 – 24:00 MDT (August 8, 2021, between 04:00 – 06:00 UTC), DigiCert will perform scheduled maintenance. Although we have redundancies to protect your service, some DigiCert services may be unavailable during this time.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance starts and when maintenance ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
7月 12, 2021
Verified Mark Certificates available now.
Verified Mark Certificates (VMCs) are a new type of certificate that allow companies to place a certified brand logo next to the “sender” field in customer inboxes—visible before the message is opened—acting as confirmation of your domain’s DMARC status and your organization’s authenticated identity. Learn more about VMC certificates.
To disable or change availability of VMC in your account, visit the Product Settings page.
Note: If you do not see VMCs in your account, it may be because we are not offering the product to all account types yet. It is also possible that the product is available, but one of your CertCentral account’s administrators turned the product off in Product Settings.
CertCentral Services API: Verified Mark Certificate enhancements
To help you manage your Verified Mark Certificate (VMC) orders in your API integrations, we’ve made the following updates to the CertCentral Services API.
New endpoints:
- Order Verified Mark Certificate
We added a new endpoint—Order Verified Mark Certificate—you can use to create or renew a VMC order. - Update VMC order
We added a new endpoint—Update VMC order—you can use to update the trademark country code or registration number for a pending VMC order. - Validate VMC logo format (SVG or encoded)
We added two new endpoints—Validate logo format (SVG) and Validate logo format (encoded)—you can use to check if the format of an SVG file is compatible with the requirements for VMC. - Upload VMC logo (SVG or encoded)
We added two new endpoints—Upload VMC logo (SVG) and Upload VMC logo (encoded)—you can use to upload a logo for a pending VMC order. - Get VMC logo
We added a new endpoint—Get VMC logo—you can use to download the logo for a VMC order.
Updated endpoints:
- Order info
We updated the Order info endpoint to return a vmc object with the trademark country code, registration number, and logo information for VMC orders. - Email certificate
We updated the Email certificate endpoint to support emailing a copy of your issued VMC.
To learn more about managing VMC certificates from your API integrations, visit Verified Mark Certificate workflow.
7月 10, 2021
Upcoming schedule maintenance
On July 10, 2021, between 22:00 – 24:00 MDT (July 11, 2021, between 04:00 – 06:00 UTC), DigiCert will perform scheduled maintenance.
During maintenance, for approximately 60 minutes, the services specified below under Service downtime will be down. Due to the scope of the maintenance, the services specified below under Service interruptions may experience brief interruptions during a 10-minute window.
Service downtime
From 22:00 – 23:00 MDT (04:00 – 05:00 UTC), while we perform database-related maintenance, the following services will be down for up to 60 minutes:
- CertCentral / Services API
- Direct Cert Portal / API
- ACME
- Discovery / API
- ACME agent automation / API
API Note: Affected APIs will return “cannot connect” errors. Certificate-related API requests that return a “cannot connect” error message during this window will need to be placed again after services are restored.
Service interruptions
During a 10-minute window, while we perform infrastructure maintenance, the following DigiCert service may experience brief service interruptions:
- Certificate Issuing Service (CIS)
- Simple Certificate Enrollment Protocol (SCEP)
- DigiCert ONE
- Automation service
- CT Log monitoring
- Vulnerability assessment
- PCI compliance scans
Services not affected
These services are not affected by the maintenance activities:
- PKI Platform 8
- PKI Platform 7
- QuoVadis TrustLink
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance starts and when maintenance ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as the maintenance is completed.
6月 5, 2021
Upcoming scheduled maintenance
On June 5, 2021, between 22:00 – 24:00 MDT (June 6, 2021, between 04:00 – 06:00 UTC), DigiCert will perform scheduled maintenance. Although we have redundancies to protect your service, some DigiCert services may be unavailable during this time.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance starts and when maintenance ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
5月 1, 2021
Upcoming scheduled maintenance
On May 1, 2021, between 22:00 – 24:00 MDT (May 2, 2021, between 04:00 – 06:00 UTC), DigiCert will perform scheduled maintenance.
For up to 10 minutes total during the 2-hour window, we will be unable to issue certificates for the DigiCert platforms, their corresponding APIs, immediate certificate issuance, and those using the APIs for other automated tasks.
Affected services:
- CertCentral / Service API
- ACME
- ACME agent automation / API
- Direct Cert Portal / API
- Certificate Issuing Service (CIS)
- Simple Certificate Enrollment Protocol (SCEP)
- QuoVadis TrustLink
Services not affected
- PKI Platform 8
- PKI Platform 7
- DigiCert ONE managers
API note:
- APIs will return "cannot connect" errors.
- Certificate requests submitted during this window that receive a "cannot connect" error message will need to be placed again after services are restored.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance starts and when maintenance ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
4月 28, 2021
CertCentral Services API: Site seal enhancements
To help you manage your site seals in your API integrations, we’ve made the following updates to the CertCentral Services API:
- New endpoint: Upload site seal logo
We added a new endpoint – Upload site seal logo – you can use to upload your company logo for use with a DigiCert Smart Seal. This logo appears in the site seal on your website. Note: Only Secure Site and Secure Site Pro SSL/TLS certificates support the option to display your company logo in the site seal. - New endpoint: Update site seal settings
We added a new endpoint – Update site seal settings – you can use to change the appearance of your site seal and the information that displays on the site seal information page. - Updated endpoint: Get site seal settings
We updated the Site seal settings endpoint to return information about each property you can customize with the Update site seal settings endpoint.
Related topics:
4月 3, 2021
Upcoming scheduled maintenance
On April 3, 2021, between 22:00 – 24:00 MDT (April 4, 2021, between 04:00 – 06:00 UTC), DigiCert will perform scheduled maintenance.
During maintenance, for up to 10 minutes, we will be unable to issue certificates for the DigiCert platforms, their corresponding APIs, immediate certificate issuance, and those using the APIs for other automated tasks.
Affected services
For approximately 10 minutes, DigiCert will be unable to issue certificates for these services and APIs:
- CertCentral / Service API
- ACME
- ACME agent automation / API
- Direct Cert Portal / API
- Certificate Issuing Service (CIS)
- Simple Certificate Enrollment Protocol (SCEP)
- QuoVadis TrustLink
Services not affected
These services are not affected by the maintenance activities:
- PKI Platform 8 / API
- PKI Platform 8 SCEP
- PKI Platform 7 / API
- PKI Platform 7 SCEP
- DigiCert ONE managers
API note:
- APIs will return "cannot connect" errors.
- Certificate requests submitted during this window that receive a "cannot connect" error message will need to be placed again after services are restored.
What can I do?
Plan accordingly:
- Schedule high-priority orders, renewals, and reissues before or after the maintenance window.
- Expect interruptions if you use the APIs for immediate certificate issuance and automated tasks.
- To get live maintenance updates, subscribe to the DigiCert Status page. This subscription includes email alerts for when maintenance starts and when maintenance ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as we complete the maintenance.
3月 17, 2021
CertCentral: New purchase order and invoice system
We are happy to announce that we are using a new purchase order and invoice system in CertCentral. We've made several changes to make it easier for you to manage your purchase orders and invoices.
The next time you sign in to CertCentral, you will see two new menu options under Finances: Pay Invoice and Purchase Orders and Invoices. Additionally, we now send all invoice emails from our new invoice system.
Pay invoices page
When you open the Pay invoice page, all invoices are preselected by default. You can choose to pay them all or select those you want to pay.
Note: If you use divisions with separate funds, when you open the Pay invoice page, all invoices for the top-level division are selected by default. Use the For dropdown to view the unpaid invoices by division in your account.
Purchase orders and invoices page
On the new Purchase orders and invoices page, you can create a purchase order (PO). In the Purchaseorders table, you can view pending and rejected POs. After we approve a PO, it becomes an invoice and moves to the Invoices table.
Note: If you use divisions with separate funds, you see the Purchase order and invoice summary page. When you click a division name, it opens the Purchase order and invoices page, where you can view the POs and invoices for that division.
In the Invoices column of the Invoices table, you can see the invoice number and the PO from which we generated it. You can download a copy of the invoice or pay the invoice. When you click Pay invoice, we take you to the Pay invoice page to pay the invoice and make the funds available in your account.
Existing PO and Invoice migration
- Autogenerated invoices
When we migrated our billing system, we did not migrate your autogenerated invoices. At the end of March, we will autogenerate a new invoice for your total amount owed. However, you can make a payment on your account at any time on the Deposit Funds page (in the left main menu, go to Finances > Deposit Funds). - Invoices generated from approved purchase orders
When we migrated your invoices to the new system, we gave them new invoice numbers. However, the associated purchase order number remains the same. If you have questions or trouble finding an invoice, please contact your account manager or DigiCert Accounts Receivable. Make sure to include your PO number and the original invoice number in the email.
CertCentral Services API: View balance enhancements
To help you track financial data in your API integrations, we updated the View balance endpoint to return the following data:
unpaid_invoice_balance
Unpaid invoice balancenegative_balance_limit
Amount the balance can go into the negativeused_credit_from_other_containers
Amount owed by other divisions in the account (for accounts with separate division funds enabled)total_available_funds
Total funds available for future purchases
Example response:
For more information, see the documentation for the View balance endpoint.
3月 6, 2021
Upcoming scheduled maintenance
On March 6, 2021, between 22:00 – 24:00 MST (March 7, 2021, between 05:00 – 07:00 UTC), DigiCert will perform scheduled maintenance.
Although we have redundancies in place to protect your service, some DigiCert services may be unavailable during this time.
What can you do?
Please plan accordingly.
- Schedule your high-priority orders, renewals, and reissues around the maintenance window.
- To get live maintenance updates, subscribe to the DigiCert Status page. The subscription includes emails to let you know when maintenance starts and ends.
- For scheduled maintenance dates and times, see DigiCert 2021 scheduled maintenance.
Services will be restored as soon as the maintenance is completed.
2月 6, 2021
今後の予約済メンテナンス
2021年02月06日 午後 10:00 ～ 12:00 MST（2021年02月07日 午前 05：00 ～ 07：00 UTC）),デジサートは重大メンテナンスを実施します。
メンテナンス中、下記のサービスは約 60 分間ダウンします。ただし、メンテナンス実施の範囲によっては、2時間のメンテナンスウインドウ中さらにサービスが中断される場合があります。
次のプラットフォームにサインインおよび次のサービスと API にアクセスできなくなります。
- CertCentral / Service API
- Direct Cert Portal / Direct Cert Portal API
- 証明書発行サービス (CIS)
- Simple Certificate Enrollment Protocol (SCEP)
- Discovery / API
- ACME
- ACME エージェント自動化 / API
デジサートは、以下のサービスおよび API について証明書を発行することができなくなります。
- CertCentral / Services API
- Direct Cert Portal / Direct Cert Portal API
- 証明書発行サービス (CIS)
- Simple Certificate Enrollment Protocol (SCEP)
- Complete Website Security (CWS) / API
- Managed PKI for SSL (MSSL) / API
- QV トラストリンク
以下のサービスはメンテナンス作業の影響を受けません。
- PKI Platform 8
- PKI Platform 7
- DigiCert ONE マネージャ
API メモ:
- 証明書の要求、ドメインと認証要求の追加など、証明書関連のトランザクションを処理するサービスは利用できなくなります。
- API は、“「接続できません」” エラーを返してきます。
- "「接続できません」" エラーメッセージが届くこのウインドウで行った証明書要求は、サービス復帰後でもう一度行うひつようがあります。
どのようにしたらよいですか？
必要に応じて計画:
- メンテナンスウインドウについて、高優先度オーダー、更新、再発行の発行を予約します。
- API を使用して、即時証明書発行およびその他の自動タスクを行う場合は、中断が発生する場合があります。
- リアルタイム更新を行うには、 ［デジサートステータス］ ページに利用登録してください。
- 「デジサート 2021 予約済メンテナンス」 または予約済メンテナンス日付と時刻を参照してください。
サービスはメンテナンス完了次第、復帰されます。
2月 5, 2021
CertCentral:OV/EV 証明書要求フォームに組織オプションを改善およち追加しました
お使いのアカウントで組織の TLS/SSL 証明書をオーダーしやすくするため、OV と EV 証明書要求フォームの ［組織を追加する］ オプションを更新しました。.
10 以上の組織に証明書を発行するアカウントの場合は、3つの新しい情報を表示します。この情報は、組織名が同様または同一のときに役立ちます。
- 仮名 (使用する場合)
- 組織 ID
- 住所
検索している組織の名前を入力する機能も追加しました。
ご自身でご確認ください
お客様が次回 OV または EV TLS/SSL 証明書を要求するとき、［組織を 追加する］ をクリックしてください。［組織］ ドロップダウンに ,次の組織情報が表示されます－名前、仮名 (使用する場合)、ID、および住所。組織の名前を入力することもできます。
1月 20, 2021
CertCentral Services API:新しいユニットオーダー詳細と［ユニットオーダーをキャンセスする］エンドポイント
CertCentral Services API に新しいエンドポイントを追加しましたので、お知らせいたします。ユニットオーダー詳細 と ユニットオーダーをキャンセルする.
これらのエンドポイントで、ユニットオーダーについての情報を取得し、ユニットオーダーをキャンセルすることができます。
ユニットオーダーをキャンセルする:
- ユニットオーダーをキャンセルできるのは、オーダー執行から30日以内のみです。
- オーダーのサブアカウントがユニットの使用した場合は、ユニットオーダーをキャンセルすることはできません。
ユニットを支払方法として使用するサブアカウントを管理する場合、Services API を使用して、次のタスクを実行できます。
CertCentral Services API:［製品リスト］、［製品制限］、および［製品情報］エンドポイントを改善
お使いのアカウント中の電子証明書製品について利用可能なオーダー有効期間を探しやすくするため、［製品リスト］、［製品制限］、および［製品情報］エンドポイントに応答パラメータを追加しました。
これらの新しい応答パラメータで、お使いのアカウントの各製品のデフォルトおよびカスタマイズオーダー有効期間を表示することができます。
allowed_order_validity_years パラメータは、お使いのアカウントの各製品についてサポート対象のオーダー有効期間のリストを返してきます。
allowed_order_lifetimes パラメータは、お使いのアカウントの管理グループとユーザーロール割当が異なるユーザー向けに、カスタマイズしたオーダー有効期間制限のリストを返してきます。
allowed_order_validity_yearsパラメータは、証明書製品を要求する場合に利用可能なオーダー有効期間のリストを返してきます。custom_order_expiration_date_allowedパラメータは、証明書製品を要求した場合にカスタムオーダー有効期限日を設定できるかどうかを記載したブーリアン値を返してきます。
CertCentral Services API:［サブアカウントオーダー情報］エンドポイントを改善
サブアカウントオーダーの有効期間についての情報を探しやすくするため、［サブアカウントオーダー情報］ エンドポイントに新しい応答パラメータを追加しました。これらの新しい応答パラメータで、オーダー開始日、オーダー終了日、およびオーダーが複数年プランかどうかを確認できます。
is_multi_year_planパラメータは、オーダーが複数年プランの場合に"1"を返します。order_valid_fromパラメータは、オーダー有効期間の開始日を返します。order_valid_tillパラメータは、オーダー有効期間の終了日を返します。
新しいパラメータがある応答の例
12月 22, 2020
CertCentral Services API:更新通知設定を更新する
CertCentral Services API 連絡先に新しいエンドポイントを追加しました。更新通知設定を更新する.このエンドポイントを使用して、証明書オーダーの更新通知を有効または無効にします。
詳細は、Services API ドキュメントでこのレファレンストピックをご覧ください。