[ABTEST-537] [01.02-31.03] Migration to new Intermediate Certificate Authority Created: 18/Jan/23 Updated: 18/Jan/23 Resolved: 18/Jan/23 |
|
| Status: | Closed |
| Project: | A/B Testing |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Spike | Priority: | Neutral |
| Reporter: | Laura Delnevo | Assignee: | Laura Delnevo |
| Resolution: | Not an issue | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Template: |
|
| Epic Link: | AuthorX Maintenance |
| Sprint: | AuthX 26 |
| Story Points: | 0 |
| Team: |
| Description |
|
Migration of Amazon public certificates to new Intermediate Certificate Authority (ICA) [AWS Account: 786808193965] You have an AWS Certificate Manager(ACM) account with at least one unexpired Amazon issued [1] public certificate. Between February 1, 2023, and March 31, 2023, Amazon will migrate all Amazon-issued public certificates from the old Intermediate Certificate Authorities (ICA) to one of multiple Intermediate Certificate Authorities (ICA) / Sub-ordinate Certificate Authorities that we introduced in October 2022. An ICA chains up to the root CA and is used to issue the leaf certificates that you receive and use. You can read more about the new ICAs in our AWS Security blog [2]. No action is required from you unless you explicitly make use of existing ICA information through certificate pinning. If you do pin to an ICA, you can read more about the ICAs and actions you can take in the AWS Security blog [2]. The migration of existing certificates to the new ICAs will happen with no additional notifications. The migrated certificates will retain the existing certificate expiry date as per your current certificate. The certificate issuance date will change to the ICA migration date. As a reminder, newly requested Amazon public certificates are already being issued from the new ICAs as of October 8, 2022. Amazon has also migrated public certificates that are not in use to the new ICAs over the past 3 months. Amazon will revoke the old ICA by the end of May 2023, to correct a known issue with the intermediate certificate as well as move ACM-issued certificates to be in line with more modern certificate standards. If you have any questions or concerns, please contact AWS Support [3]. [1] https://www.amazontrust.com/repository/ |