Starting in mid-October 2018, the Google Chrome browser will no longer trust some Symantec and GeoTrust brand digital certificates. To address this, Symantec released a root certificate upgrade plan for Chrome. To avoid any compatibility issues with Google Chrome, replace your purchased Symantec brand certificates as soon as possible, following the instructions in this document.
Affected Scope
Symantec brand digital certificates within the following timeframes will be affected by this Symantec root certificate upgrade plan. Replace existing digital certificates before the specified time.
Digital certificates issued before June 1, 2016, and expiring after March 18, 2018:
Complete certificate replacement and redeploy the replaced certificate before March 18, 2018.
Digital certificates issued after June 1, 2016, and expiring after September 13, 2018:
Complete certificate replacement and redeploy the replaced certificate before September 13, 2018.
According to official Symantec news, Symantec enabled a new certificate issuance system starting December 1, 2017. Digital certificates issued after this date fully comply with Google's recommendations and will no longer have compatibility issues.
Symantec digital certificates within the following timeframes are not affected by this root certificate upgrade plan:
Digital certificates issued before June 1, 2016, and expiring before March 2018.
Digital certificates issued after June 1, 2016, and expiring before September 2018.
Certificate Replacement Service
Starting in June 2018, Alibaba Cloud Certificate Service launched a certificate replacement and upgrade service for affected Symantec digital certificates.
For affected OV/EV type digital certificates, CA certification center auditors will contact you by phone. After confirmation, they will reissue new digital certificates.
NoteIf you find an OV/EV type certificate order in pending review status in the SSL Certificate console, wait patiently for notification from CA center auditors. After receiving the certificate issuance application confirmation email from the CA certification center, read the body carefully, then click Agree or Approve to confirm.
For affected DV type digital certificates, Alibaba Cloud staff will submit a certificate reissuance request for you. Complete the domain validation operation in the SSL Certificate console, following the progress prompts.
NoteIf your original DV type digital certificate order meets the following conditions, the system will attempt to automatically add DNS records to help you complete domain validation:
Domain validation completed via DNS.
The domain name bound to the certificate is managed by Cloud DNS Service.
You have authorized the Certificate Service system to automatically add DNS records.