This isn’t technically on-topic for BigFix, but is serious enough that I wanted to ensure as many of us as possible are aware of it.
Digicert made a mistake in how they validate domain ownership before issuing certificates, with a net result that they are going to be revoking issued certificates en masse within the next 24 hours.
https://www.digicert.com/support/certificate-revocation-incident
For perspective, this impacts 0.4% of their certificate validations. Thankfully not all Digicert certificates. If you are a customer of Digicert, log into their portal. If your account is impacted, a banner will appear at the top of your dashboard.
Very good perspective.
I’m not sure the entire customer base or how large 0.4% is in absolute terms, but I’ve worked with several companies that are using Digicert and want to be sure we’re not caught by this.
Ok, I think I’ve found a reference to how many customers/certificates are affected in absolute terms. It appears to be some 83,000 certificates across 6,800 customers of DigiCert.
https://www.securityweek.com/digicert-revoking-83000-certificates-of-6800-customers/