3 ms·
"But here's the thing: why did Geotrust just go ahead and revoke the certificates for all .PW domains without any warning?" Why indeed? My first notice of this
by jqm 11y ago
"But here's the thing: why did Geotrust just go ahead and revoke the certificates for all .PW domains without any warning?"
Why indeed? My first notice of this was a client unable to use the app even though the cert was issued less than 6 months ago and was a 2 year cert. Like the author I also initially thought client configuration issue until I tried.
I contacted the reseller who didn't have an answer right off the bat but had to contact Geotrust. After 15 minutes of fooling around I got an answer and a refund. So yes, they issued me a refund. Great. My clients had downtime. I had to drop what I was doing "right then" and install new certs. Finally I had to walk clients through clearing old certs from their browser as they were getting the scary "Untrusted!" popup. Fortunately this is a private app for a specific client so there weren't a bunch of calls.
Geotrust's handling of this was ridiculous. No email, no notification... I'll certainly never get a cert from then again over this incident.
- rosege 11y agosounds like they were hacked and had to revoke all certs for that TLD
- jqm 11y agoThis happened last Monday morning incidentally. So the authors certs have actually been suspended for at least a week already.
- nindalf 11y agoI don't think GeoTrust was hacked. If they had been, their response was "sorry guys, we're working on fixing this soon. You'll have to do x,y,z to fix your domain". Their actual response was "[we] will no longer be issuing SSL certs to .PW domains", so they have some problem with .PW that doesn't seem to be technical.