Menu

Advisories

Advisories

AutoCSR Discontinued

AutoCSR Discontinued

Mozilla Policy has clarified that CAs should not generate SSL keys on behalf of Subscribers. As such, GlobalSign has discontinued the AutoCSR feature for publicly trusted SSL Certificates.

SHA-256 Rollout

SHA-256 Rollout

SHA-2 consists of a family of cryptographic hashing algorithms developed in part by NIST (National Institute of Standards and Technology) to replace the aging SHA-1 hashing algorithm which may have mathematical weaknesses. GlobalSign, in our role as your security partner, supported the deprecation of SHA-1 and the transition to SHA-256, the most widely supported hashing algorithm within the SHA-2 family. This article defines the important milestones for the introduction of SHA-256 Certificates and the depreciation of SHA-1 Certificates.

Upcoming TLS Domain Validation Changes – Fall 2021

Upcoming TLS Domain Validation Changes – Fall 2021

Over the second half of 2021, two changes in domain validation policy will take effect, which may impact how you validate domains when issuing publicly trusted TLS certificates. These policy changes apply to all new certificate requests, renewals, re-issues and pre-validated domains. These changes will have NO IMPACT on TLS/SSL certificates that have already been issued.

HTTP Domain Validation Method Policy Changes

HTTP Domain Validation Method Policy Changes

Per Industry requirements, effective November 30th (Atlas customers) & November 28th (GCC Customers), GlobalSign will prohibit issuing wildcard or subdomain SAN certificates when the domain is validated via the HTTP Domain validation method.

Certificates with Future notBefore Date

Certificates with Future notBefore Date

In accordance with a directive from Chrome, GlobalSign does not issue Certificates that use a custom validity period with a notBefore date set in the future. The issue date of the Certificate will always be the notBefore date of the Certificate.

CVE-2014-0160 - Heartbleed

CVE-2014-0160 - Heartbleed

Late Monday, April 7th, 2014, a bug was disclosed in OpenSSL's implementation of the TLS heartbeat extension.

GlobalSign System Alerts

View recent system alerts.

View Alerts

Atlas Discovery

Scan your endpoints to locate all of your Certificates.

Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.

Contact Support