CT Log monitoring
We are happy to announce that Secure Site Pro certificates now come with access to a CT Log monitoring service. CT Log monitoring allows you to monitor the public CT logs for SSL/TLS certificates issued for the domains on your Secure Site Pro certificate order, in real time.
CT Log monitoring is a cloud service so there is nothing to install or manage. After we've issued your Secure Site Pro certificate and turned CT Log monitoring on for the order, you can start using the service immediately to monitor the domains on the certificate order.
The CT Log monitoring benefit for Secure Site Pro certificates is retroactive. To access your CT Log monitoring for your issued and active Secure Site Pro certificate order, contact your account manager or our support team.
CT Log monitoring helps you:
The service pulls the discovered SSL/TLS certificates into your CertCentral account, where you can view details about the certificates to quickly identify any misissued certificates for your domains. You can also download copies of the non-DigiCert certificates right from your CertCentral account.
Email notifications
After you've enabled CT Log monitoring for a Secure Site Pro certificate order, you'll receive two types of email notifications: Daily CT log digest and if needed, Urgent notifications. Email notifications are sent to account admins and allow them to check the CT logs for their domains without signing in to their CertCentral account every day.
To learn more about what's included with each Secure Site Pro certificate, see Pro TLS/SSL Certificates. To learn more about enabling CT log monitoring for a Secure Site Pro certificate order. see Enable CT log monitoring.
In the DigiCert Services API, we added two new Order info endpoints. Now, you can use the order ID, the certificate's serial number, or the certificate's thumbprint to view the details for a certificate order.
Currently, these new endpoints only retrieve data for the primary certificate. For more information on the Services API, see our Developers portal.
PQC dockerized toolkit guide available now
Secure Site Pro Secure Site Pro certificates come with access to the DigiCert post-quantum cryptographic (PQC) toolkit. To create your own PQC test environment, use one of these options:
Our toolkits contain what you need to create a hybrid SSL/TLS certificate. The hybrid certificate in the toolkits uses a PQC algorithm paired with an ECC algorithm allowing you to test the feasibility of hosting a post-quantum, backwards compatible hybrid certificate on your website.
Note: To access your PQC toolkit, go to your Secure Site Pro Certificate's Order # details page. (In the sidebar menu, click Certificates > Orders. On the Orders page, click the order number link for your Secure Site Pro certificate. On the certificate's order details page, click PQC toolkit.)
To learn more about post-quantum cryptography, see Post-Quantum Cryptography. To learn more about what's included with each Secure Site Pro certificate, see Pro TLS/SSL Certificates.
DigiCert is happy to announce we made it easier for DigiCert Accounts using the Retail API to upgrade to our new Certificate Management Platform, DigiCert CertCentral—For free!
To make the upgrade as seamless as possible, we shimmed these Retail API endpoints:
Now, you can upgrade your DigiCert Account without any interruptions to your API integrations. Once you're upgraded, make plans to build new integrations with CertCentral.
For information about the DigiCert Retail API, see Documentation for the DigiCert Retail API.
Secure Site Pro 证书现在随附对 DigiCert 后量子加密 (PQC) 工具包的访问权限。我们的工具包包含创建混合 SSL/TLS 证书所需的一切工具。工具包中的混合证书使用 PQC 算法与 ECC 算法配对，您可以测试在您的网站上托管后量子、向后兼容的混合证书的可行性。
注意：对 Secure Site Pro 证书的 PQC 优势可追溯。要访问 PQC 工具包，请进入 Secure Site Pro 证书的订单编号详细信息页面。（在侧栏菜单中，单击证书 > 订单。在订单页面，单击 Secure Site Pro 证书的订单编号链接。在证书的订单详细信息页上，单击 PQC 工具包。）
欲了解有关后量子加密和 PQC 工具包的更多信息：
欲了解有关每个 Secure Site Pro 证书所含项目的更多信息，请参阅 Pro TLS/SSL 证书。
Secure Site Pro TLS/SSL 现在包括在所有 CertCentral 帐户中。有关您需要知道的有关这些证书的一切信息，请参阅 DigiCert Secure Site Pro。
在您的帐户的侧栏菜单中，将鼠标停留在请求证书上。在 Business SSL 证书下，您将找到新的 Secure Site Pro 证书。
我们更新了 CertCentral SAML 联盟设置，您可以让联盟名称不显示在 SAML 单一登录 IdP 选择和 SAML 证书请求 IdP 选择页面的 IdP 列表中。
现在，在联盟设置页面的 IDP 元数据下，我们添加了包括联盟名称选项。如果您不希望联盟名称显示在 IdP 选择页面的 IdP 列表中,取消选中将我的联盟名称添加到 IdP 列表。
Secure Site Pro TLS/SSL 在 CertCentral 中可用。通过 Secure Site Pro，您按域缴费，无基本证书费用。添加一个域，则收取一个域的费用。如果需要 9 个域，则收取 9 个域的费用。一张证书上最多可保护 250 个域。
我们提供两种类型的 Secure Site Pro 证书，一种是 OV 证书，另一种是 EV 证书。
每张 Secure Site Pro 证书所包含的优势
每张 Secure Site Pro 证书包括（免费）对未来在 CertCentral 中新增的高级功能（例如，CT 日志监视和验证管理）的最先访问权。
其他优势包括：
要对您的 CertCentral 帐户启用 Secure Site Pro 证书，请联系您的客户经理或我们的支持团队。
欲了解有关我们的 Secure Site Pro 证书的更多信息，请参阅 DigiCert Secure Site Pro。
公共 SSL 证书不再保护具有下划线的域名 ("_")。所有之前颁发的在域名中包含下划线的证书必须在此日期前失效。
注意：首选下划线解决方案是为含有下划线的主机名 (FQDN) 重命名并替换证书。但是，对于无法重命名的情况，您可以使用专用证书，而且在有些情况下，可以使用通配符证书保护整个域。
有关更多信息，请参阅停用域名中的下划线。
