筛选方式: New x 清除
new

New location for API Keys and ACME Directory URLs

With more and more organizations working to automate SSL/TLS certificate deployment, we added a new left main menu optionAutomationand placed the two primary tools for automating certificate deployment under the new menu option: API Keys and ACME Directory URLs.

Previously, you accessed these features from the Account Access page. Now, we've conveniently added them to the left main menu (in the main menu, click Automation > API Keys and Automation > ACME Directory URLs).

Note: Only account administrators and managers can see the Automation menu options in their left main menu.

new

We added two new statuses to the Organizations and Organization details pages: validation expires soon, and validation expired. These new statuses make it easier to proactively track your organization validations and make sure they stay up to date.

Now, when you visit the Organizations page (in the sidebar menu click Certificates > Organizations), you can quickly identify organizations with validation that is expiring soon or has already expired. For more details about the expiring or expired organization validation, click the organization name.

fix

We fixed a bug where some accounts were unable to submit organizations for EV CS – Code Signing Organization Extended Validation. The affected accounts only contained EV Code Signing and Code Signing products.

As part of the fix, we split up the EV and EV CS verified contact options. Now, when submitting an organization for EV CS – Code Signing Organization Extended Validation, you can submit the organization's verified contact for EV CS order approvals only. Similarly, when submitting an organization for EV – Extended Organization Validation (EV), you can submit the organization's verified contact for EV SSL certificate order approvals only.

Note: For EV code signing certificate orders, organizations and the organization's verified contacts need to be pre-validated. For more information about organization pre-validation, see our Submit an organization for pre-validation instructions.

enhancement

In Discovery, we updated the Certificates page, adding a new action—Replace certificate—to the Actions dropdown. Now, from the Certificates page, you can replace any certificate with a DigiCert certificate regardless of issuing CA.

(In the sidebar menu, click Discovery > View Results. On the Certificates page, locate the Actions dropdown for the certificate you want to replace. Click Actions > Replace certificate.)

enhancement

In Discovery, we updated the Certificates by rating widget on the Discovery dashboard, making it easier to see the security ratings for your public SSL/TLS certificates (in the sidebar menu, click Discovery > Discovery Dashboard).

As part of the update, we renamed the widget: Certificates analyzed by security rating. Then, we split the chart on the widget into two charts: Public and Others. Now, you can use the Public | Others toggle switch on the widget to select the chart you want to see.

The Certificates analyzed by security rating - Public chart displays the ratings for your public SSL/TLS certificates only. The Certificates analyzed by security rating - Other chart displays the rating for all your other SSL/TLS certificates (e.g., private SSL certificates).

enhancement

In Discovery, we updated the Endpoints and Server details pages making it easier to see the correlation between the IP address and the hostname/FQDN scan it resulted from.

Now, when you configure a scan for a hostname/FQDN, and the scan's endpoint results return IP addresses, we include the hostname/FQDN from the scan with the IP address.

Update note: The hostname update is available in the latest sensor version – 3.7.10. After the sensors updates are completed, rerun scans to see the hostname/IP address correlation on your scan results.

new

In the DigiCert Services API, we added two new endpoints for ordering your Secure Site Pro certificates: Order Secure Site Pro SSL and Order Secure Site Pro EV SSL.

  • POST https://www.digicert.com/services/v2/order/certificate/ssl_securesite_pro
  • POST https://www.digicert.com/services/v2/order/certificate/ssl_ev_securesite_pro

Benefits included with each Secure Site Pro certificate

Each Secure Site Pro certificate includes – at no extra cost – first access to premium feature such as the Post Quantum Cryptographic (PQC) toolkit.

Other benefits include:

  • Priority validation
  • Priority support
  • Two premium site seals
  • Malware check
  • Industry-leading warranties – protection for you and your customer!

To learn more about our Secure Site Pro certificates, see DigiCert Secure Site Pro.

To activate Secure Site Pro certificates for your CertCentral account, contact your account manager or our support team.

new

我们的 CertCentral 组合中增加了一个新工具 - Discovery - 提供有关您整个 SSL/TLS 证书状况的实时分析。

为了快速找到您的所有内部和公开的 SSL/TLS 证书,无论证书颁发机构 (CA) 是什么,Discovery 能发现证书配置和实现中的问题,以及您的端点配置中与证书相关的漏洞或问题。

注意:Discovery 使用传感器扫描您的网络。传感器是您安装在战略性位置的小软件应用程序。每次扫描都关联一个传感器。

扫描在您的 CertCentral 帐户内集中配置和管理。扫描结果显示在 CertCentral 内的直观的交互式仪表板中。将扫描配置为按照设定的时间表运行一次或多次。

enhancement

我们更新了 CertCentral SAML 联盟设置,您可以让联盟名称不显示在 SAML 单一登录 IdP 选择 SAML 证书请求 IdP 选择页面的 IdP 列表中。

现在,在联盟设置页面的 IDP 元数据下,我们添加了包括联盟名称选项。如果您不希望联盟名称显示在 IdP 选择页面的 IdP 列表中,取消选中将我的联盟名称添加到 IdP 列表

new

Secure Site Pro TLS/SSL 在 CertCentral 中可用。通过 Secure Site Pro,您按域缴费,无基本证书费用。添加一个域,则收取一个域的费用。如果需要 9 个域,则收取 9 个域的费用。一张证书上最多可保护 250 个域。

我们提供两种类型的 Secure Site Pro 证书,一种是 OV 证书,另一种是 EV 证书。

  • Secure Site Pro SSL
    获取适合您需要的 OV 证书。为一个域、一个通配符域及其所有子域提供加密和授权,或者使用使用者可选名称 (SAN) 保护一个证书上的多个域和通配符域。
  • Secure Site Pro EV SSL
    获取适合您需要的扩展验证证书。提供加密和授权以保护一个域或使用使用者可选名称 (SAN) 保护一个证书上的多个站点(完全限定的域名)。

每张 Secure Site Pro 证书所包含的优势

每张 Secure Site Pro 证书包括(免费)对未来在 CertCentral 中新增的高级功能(例如,CT 日志监视和验证管理)的最先访问权。

其他优势包括:

  • 优先验证
  • 优先支持
  • 两个高级网站标章
  • 恶意软件检查
  • 行业一流保证

要对您的 CertCentral 帐户启用 Secure Site Pro 证书,请联系您的客户经理或我们的支持团队

欲了解有关我们的 Secure Site Pro 证书的更多信息,请参阅 DigiCert Secure Site Pro

compliance

公共 SSL 证书不再保护具有下划线的域名 ("_")。所有之前颁发的在域名中包含下划线的证书必须在此日期前失效。

注意:首选下划线解决方案是为含有下划线的主机名 (FQDN) 重命名并替换证书。但是,对于无法重命名的情况,您可以使用专用证书,而且在有些情况下,可以使用通配符证书保护整个域。

有关更多信息,请参阅停用域名中的下划线

enhancement

我们改进了 RapidSSL DV 证书组合,您可以在这些单域证书中包括第二个特定域。

  • RapidSSL Standard DV
    现在在订购 RapidSSL Standard DV 证书时,您将默认获得证书中的两个公用名版本 -[your-domain].com 和 www.[your-domain].com。
    输入公用名后,确保选中在证书中同时包括 www.[your-domain].com 和[your-domain].com 框。
    以前,您必须分别订购单独的证书:[your-domain].com 和 www.[your-domain].com。
  • RapidSSL Wildcard DV
    现在在订购 RapidSSL Wildcard DV 证书时,您将默认获得证书中的通配符域和基域 - *.[your-domain].com 和[your-domain].com。
    输入公用名后,确保选中在证书中同时包括 *.[your-domain].com 和[your-domain].com 框。
    以前,您必须分别订购单独的证书:*.[your-domain].com 和[your-domain].com。

请参阅 CertCentral:DV 证书注册指南

enhancement

我们改进了 RapidSSL 证书端点以包括 dns_names 参数,您可以在这些单域证书中包括第二个特定域。

  • RapidSSL Standard DV
    现在在订购 RapidSSL Standard DV 证书时,您可以在证书中包括两个域版本 -[your-domain].com 和 www.[your-domain].com。
    "common_name": "[your-domain].com",
    "dns_names":["www.[your-domain].com"],

    以前,您必须订购单独的证书:[your-domain].com 和 www.[your-domain].com。
  • RapidSSL Wildcard DV
    现在在订购 RapidSSL Wildcard DV 证书时,您可以在证书中包括基域 - *.[your-domain].com 和[your-domain].com)。
    "common_name": "*.your-domain.com",
    "dns_names":["[your-domain].com"],

    以前,您必须订购单独的证书:*.[your-domain].com 和[your-domain].com。

有关 DigiCert 服务 API 文件,请参阅 CertCentral API

new

个人文档签名证书在 CertCentral 中可用:

  • 文档签名 - 个人 (500)
  • 文档签名 - 个人 (2000)

要对您的 CertCentral 帐户启用个人文档签名证书,请联系您的销售代表。

以前只提供组织文档签名证书。

  • 文档签名 - 组织 (2000)
  • 文档签名 - 组织 (5000)

欲了解有关这些证书的更多信息,请参阅文档签名证书

new

RapidSSL 和 GeoTrust DV 证书在 CertCentral 中可用:

  • RapidSSL Standard DV
  • RapidSSL Wildcard DV
  • GeoTrust Standard DV
  • GeoTrust Wildcard DV

文档

一月 12, 2018

new

DigiCert 提供另一个公开可用的 CT 日志 (Nessie)。Nessie 是新推出的具有高度可扩展性和高性能的证书透明度 (CT) 日志。

该 CT 日志由五个日志组成,根据证书到期情况,以一年为增量分片。以下是 CT 日志端点 URL 及其证书到期范围。

更多详细信息 »