DigiCert to replace Verisign URLs with DigiCert URLs

As part of the Symantec PKI services move to DigiCert, we are updating certificate profiles that include legacy verisign.com URLs. We are replacing the verisign.com URLs with new digicert.com URLs.

When will this change take place?

June 4, 2018: The MPKI 7 Pilot system will start generating certificates with the updated certificate profiles.

June 18, 2018: The MPKI 7 Production system will start generating certificates with the updated certificate profiles.

What certificate profiles are affected?

MPKI 7: Certificate profiles that include legacy verisign.com URLs are automatically updated. No other changes are made.

MPKI 8: Not affected. Certificate profiles do not include verisign.com URLs.

How does this affect my existing certificates?

Certificates that are already issued are unchanged and will continue to work as expected until expiration.

What do I need to do?

Nothing. No action is needed on your part. Profiles that include verisign.com URLs will be automatically updated with digicert.com URLs.

What are the URL changes?

Pilot profile updates on June 4, 2018

Old URL

New URL

http://pilotonsitecrl.verisign.com http://pilot-onsite-crl.pki.digicert.com
ldap://pilot-ssp-crl-ldap.verisign.com ldap://pilot-ssp-crl-ldap.pki.digicert.com
ldap://pilot-ssp-aia-ldap.verisign.com ldap://pilot-ssp-aia-ldap.pki.digicert.com
http://pilot-ssp-aia.verisign.com http://pilot-ssp-aia.pki.digicert.com
http://pilot-ocsp.verisign.com http://pilot-onsite-ocsp.pki.digicert.com
ldap://directory.verisign.com ldap://pilot-directory.pki.digicert.com
http://onsitecrl.verisign.com http://pilot-onsite-crl.pki.digicert.com
http://ssp-ocsp.verisign.com http://pilot-ssp-ocsp.pki.digicert.com
http://ocsp.verisign.com http://pilot-ssp-ocsp.pki.digicert.com
http://crl.verisign.com http://pilot-onsite-crl.pki.digicert.com
https://www.verisign.com/cps/testca http://www.symauth.com/cps
www.verisign.com/repository/CPS http://www.symauth.com/cps

Production profile updates on June 18, 2018

Old URL

New URL

http://onsitecrl.verisign.com http://onsite-crl.pki.digicert.com
http://crl.verisign.com Already deprecated
http://orgc3-crl.verisign.com Already deprecated
ldap://directory.verisign.com ldap://directory.pki.digicert.com
ldap://ssp-aia-ldap.verisign.com ldap://ssp-aia-ldap.pki.digicert.com
ldap://ssp-crl-ldap.verisign.com ldap://ssp-crl-ldap.pki.digicert.com
http://ssp-aia.verisign.com http://ssp-aia.pki.digicert.com
http://onsite-ocsp.verisign.com http://onsite-ocsp.pki.digicert.com
http://ocsp.verisign.com http://ocsp.pki.digicert.com
http://pki-ocsp.verisign.com http://ocsp.pki.digicert.com
http://ssp-ocsp.verisign.com http://ocsp.pki.digicert.com
http://www.verisign.com/repository/cds https://d.symcb.com/cps
https://www.verisign.com/cps https://d.symcb.com/cps
https://www.verisign.com/rpa-kr https://d.symcb.com/rpa
https://www.verisign.com/rpa https://d.symcb.com/rpa