GeoTrust, the Software Store\u2019s supplier for Enterprise SSL certificates, has sent the following alert:<\/p>\n
The following changes address industry standards recently adopted by the Certification Authority\/Browser (CAB) Forum, and will go into effect in mid-April: <\/p>\n
1.\tSubject Common Name (CN) in Subject Alternative Name (SAN) field entries: During enrollment, the GeoTrust system detects if the CN is already part of the SAN field. For no additional cost, we will automatically add the CN in a SAN field if it is not already included. <\/p>\n
2.\tCertificate Life Span: We will issue only certificates with 1, 2, 3 and 4-year validity periods. We will no longer issue 5 or 6-year certificates. Effective June 14, 2015, we will no longer issue 4-year certificates.<\/p>\n
3.\tPrivate Internet Protocol (IP) addresses and Internal Server Names: Certificates with validity end dates on or after November 1, 2015 cannot contain any private IP addresses or Internal Server Names.<\/p>\n
4.\tMinimum RSA key bit length: Beginning in January 2012, 2048-bit RSA keys will be required and enforced for all new multi-year SSL certificates. After December 31, 2013, the industry is discontinuing the use of 1024-bit RSA key lengths on SSL certificates, per NIST Special Publication 800-131A; all SSL certificates will be required to have 2048-bit RSA key lengths Please plan to adopt and support 2048-bit RSA key lengths in your SSL certificates to meet these requirements.<\/p>\n
As a result of the change noted in 2 above, the Software Store has stopped selling five year GeoTrust Enterprise SSL certificates as of today.<\/p>\n","protected":false},"excerpt":{"rendered":"
GeoTrust, the Software Store\u2019s supplier for Enterprise SSL certificates, has sent the following alert: The following changes address industry standards recently adopted by the Certification Authority\/Browser (CAB) Forum, and will go into effect in mid-April: 1. Subject Common Name (CN) in Subject Alternative Name (SAN) field entries: During enrollment, the GeoTrust system detects if the…<\/p>\n","protected":false},"author":2436,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-563","post","type-post","status-publish","format-standard","hentry","category-blog"],"_links":{"self":[{"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/posts\/563","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/users\/2436"}],"replies":[{"embeddable":true,"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/comments?post=563"}],"version-history":[{"count":0,"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/posts\/563\/revisions"}],"wp:attachment":[{"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/media?parent=563"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/categories?post=563"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/my.dev.vanderbilt.edu\/softwarestore\/wp-json\/wp\/v2\/tags?post=563"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}