Atlas TLS ICA Rotations

Atlas TLS ICA Rotations

Introduction

GlobalSign will start rotating our Atlas TLS CAs on a scheduled basis to promote good ecosystem security and agility. Historically, we have set up CAs and used them for many years, but there are many reasons to reduce this time interval. By reducing the length of time CAs are used, we achieve the following benefits:

  • We limit the number of certificates issued by a single CA and it's corresponding private key which limits impact if there is an integrity, compliance or security issue with the CA.
  • We reduce the size of CRLs which increases validation performance.
  • We train our customer base to expect and plan for immediate CA replacements which increases crypto agility.
  • Starting in 2022, GlobalSign Atlas TLS CAs will be updated every quarter, on the second Tuesday of the quarter at 10:30-11:00 UTC

Impact and recommendations:

  • Customers should always be prepared to accept new CAs when installing new TLS certificates. The issuing CA is available in the API and should be used when downloading the certificate so that the current CA is always provisioned with the issued certificate.  
  • Customers MUST not do public key pinning to CA certificates, and we highly discourage public key pinning at all, as that defeats the purpose of crypto agility.
  • We encourage customers to follow agile practices for Issuing CAs and always download and install the provided ICA when obtaining new certificates.
  • Please subscribe to GlobalSign's Status page for important updates here - https://status.globalsign.com/
Atlas TLS Product Type New CA Name Link to new CAs that will be used January 10, 2023 – April 11, 2023
Atlas Domain Validated TLS GlobalSign Atlas R3 DV TLS CA Q1 2023 https://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt
Atlas Domain Validated TLS - ECC Keys GlobalSign Atlas ECC R5 DV TLS CA Q1 2023 https://secure.globalsign.com/cacert/gsatlaseccr5dvtlsca2023q1.crt
Atlas Organization Validated TLS GlobalSign Atlas R3 OV TLS CA Q1 2023 https://secure.globalsign.com/cacert/gsatlasr3ovtlsca2023q1.crt
Atlas Organization Validated TLS - ECC Keys GlobalSign Atlas ECC R5 OV TLS CA Q1 2023 https://secure.globalsign.com/cacert/gsatlaseccr5ovtlsca2023q1.crt
Atlas ACME Domain Validated TLS GlobalSign Atlas R3 DV ACME CA 2023 Q1 https://secure.globalsign.com/gsatlasr3dvacmeca2023q1.crt 
Atlas ACME Domain Validated TLS  - ECC Keys GlobalSign Atlas ECC R5 ACME DV CA 2023 Q1 https://secure.globalsign.com/cacert/gsatlaseccr5dvacmeca2023q1.crt
Atlas ACME Organization Validated TLS GlobalSign Atlas R3 OV ACME CA 2023 Q1 https://secure.globalsign.com/gsatlasr3ovacmeca2023q1.crt
Atlas ACME Organization Validated TLS – ECC keys GlobalSign Atlas ECC R5 ACME OV CA 2023 Q1 https://secure.globalsign.com/cacert/gsatlaseccr5ovacmeca2023q1.crt

 Atlas TLS Product Type New CA Name Link to new CAs that will be used October 11, 2022 – January 10, 2023
Atlas Domain Validated TLS GlobalSign Atlas R3 DV TLS CA Q4 2022 https://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q4.crt
Atlas Domain Validated TLS - ECC Keys GlobalSign Atlas ECC R5 DV TLS CA Q4 2022 https://secure.globalsign.com/cacert/gsatlaseccr5dvtlsca2022q4.crt
Atlas Organization Validated TLS GlobalSign Atlas R3 OV TLS CA Q4 2022 https://secure.globalsign.com/cacert/gsatlasr3ovtlsca2022q4.crt
Atlas Organization Validated TLS - ECC Keys GlobalSign Atlas ECC R5 OV TLS CA Q4 2022 https://secure.globalsign.com/cacert/gsatlaseccr5ovtlsca2022q4.crt
Atlas ACME Domain Validated TLS GlobalSign Atlas R3 DV ACME CA 2022 Q4 https://secure.globalsign.com/gsatlasr3dvacmeca2022q4.crt 
Atlas ACME Domain Validated TLS  - ECC Keys GlobalSign Atlas ECC R5 ACME DV CA 2022 Q4 https://secure.globalsign.com/cacert/gsatlaseccr5dvacmeca2022q4.crt

Atlas TLS Product Type New CA Name Link to new CAs that will be used July 12, 2022 – October 11, 2022
Atlas Domain Validated TLS GlobalSign Atlas R3 DV TLS CA Q3 2022 https://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q3.crt
Atlas Domain Validated TLS - ECC Keys GlobalSign Atlas ECC R5 DV TLS CA Q3 2022 https://secure.globalsign.com/cacert/gsatlaseccr5dvtlsca2022q3.crt
Atlas Organization Validated TLS GlobalSign Atlas R3 OV TLS CA Q3 2022 https://secure.globalsign.com/cacert/gsatlasr3ovtlsca2022q3.crt
Atlas Organization Validated TLS - ECC Keys GlobalSign Atlas ECC R5 OV TLS CA Q3 2022 https://secure.globalsign.com/cacert/gsatlaseccr5ovtlsca2022q3.crt
Atlas ACME Domain Validated TLS GlobalSign Atlas R3 DV ACME CA 2022 Q3 https://secure.globalsign.com/gsatlasr3dvacmeca2022q3.crt 
Atlas ACME Domain Validated TLS  - ECC Keys GlobalSign Atlas ECC R5 ACME DV CA 2022 Q3 https://secure.globalsign.com/cacert/gsatlaseccr5dvacmeca2022q3.crt

Atlas TLS Product Type New CA Name Link to new CAs that will be used April 12, 2022 – July 12, 2022
Atlas Domain Validated TLS GlobalSign Atlas R3 DV TLS CA Q2 2022 https://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q2.crt
Atlas Domain Validated TLS - ECC Keys GlobalSign Atlas ECC R5 DV TLS CA Q2 2022 https://secure.globalsign.com/cacert/gsatlaseccr5dvtlsca2022q2.crt
Atlas Organization Validated TLS GlobalSign Atlas R3 OV TLS CA Q2 2022 https://secure.globalsign.com/cacert/gsatlasr3ovtlsca2022q2.crt
Atlas Organization Validated TLS - ECC Keys GlobalSign Atlas ECC R5 OV TLS CA Q2 2022 https://secure.globalsign.com/cacert/gsatlaseccr5ovtlsca2022q2.crt
Atlas ACME Domain Validated TLS GlobalSign Atlas R3 DV ACME CA 2022 Q2 https://secure.globalsign.com/gsatlasr3dvacmeca2022q2.crt 
Atlas ACME Domain Validated TLS  - ECC Keys GlobalSign Atlas ECC R5 ACME DV CA 2022 Q2 https://secure.globalsign.com/cacert/gsatlaseccr5dvacmeca2022q2.crt

Atlas TLS Product Type New CA Name Link to new CAs that will be used January 11, 2022 – April 12, 2022
Atlas Domain Validated TLS GlobalSign Atlas R3 DV TLS CA Q1 2022 https://secure.globalsign.com/cacert/gsatlasr3dvtlsca2022q1.crt
Atlas Domain Validated TLS - ECC Keys GlobalSign Atlas ECC R5 DV TLS CA Q1 2022 https://secure.globalsign.com/cacert/gsatlaseccr5dvtlsca2022q1.crt
Atlas Organization Validated TLS GlobalSign Atlas R3 OV TLS CA Q1 2022 https://secure.globalsign.com/cacert/gsatlasr3ovtlsca2022q1.crt
Atlas Organization Validated TLS - ECC Keys GlobalSign Atlas ECC R5 OV TLS CA Q1 2022 https://secure.globalsign.com/cacert/gsatlaseccr5ovtlsca2022q1.crt
Atlas ACME Domain Validated TLS GlobalSign Atlas R3 DV ACME CA 2022 Q1 https://secure.globalsign.com/gsatlasr3dvacmeca2022q1.crt 
Atlas ACME Domain Validated TLS  - ECC Keys GlobalSign Atlas ECC R5 ACME DV CA 2022 Q1 https://secure.globalsign.com/cacert/gsatlaseccr5dvacmeca2022q1.crt

Atlas TLS Product Type New CA Name Link to new CAs that will be used August 24, 2021 - January 11, 2022
Atlas Domain Validated TLS GlobalSign Atlas R3 DV TLS CA H2 2021 https://secure.globalsign.com/cacert/gsatlasr3dvtlscah22021.crt
Atlas Organization Validated TLS GlobalSign Atlas R3 OV TLS CA H2 2021 https://secure.globalsign.com/cacert/gsatlasr3ovtlscah22021.crt
Atlas Domain Validated TLS - ECC Keys GlobalSign Atlas ECC R5 DV TLS CA H2 2021 https://secure.globalsign.com/cacert/gsatlaseccr5dvtlscah22021.crt
Atlas Organization Validated TLS - ECC Keys GlobalSign Atlas ECC R5 OV TLS CA H2 2021 https://secure.globalsign.com/cacert/gsatlaseccr5ovtlscah22021.crt

GlobalSign System Alerts

View recent system alerts.

View Alerts

Certificate Inventory Tool

Scan your endpoints to locate all of your Certificates.

Log In / Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.

Contact Support