Extensions of the AlwaysOnSSL API

We have just updated our AlwaysOnSSL API. The API now supports the synchronous ordering of TLS certificates with up to 2048-bit RSA, 4096-bit RSA and ECC (previously only 2048-bit RSA).

Despite numerous changes on the part of the Certification Authority, as a customer of CertCenter AG you do not have to make any adjustments to your existing connection to the CertCenter API. Your existing mod_fauth integration will also remain compatible.

For the generation of certificates with larger RSA keys or ECC only a CSR generated accordingly is necessary (with 4096-bit RSA or ECC key). The CertCenter API then intelligently interprets the rest and does the work for you in the background.

DigiCert & Symantec: A dream couple.

It has been almost a year since Symantec’s hitherto unscathed reputation in the certificate business was shaken because of inconsistencies in the vetting process of some Symantec RAs and the subsequent gloomy forecast by Google’s Chromium team. Every day, you may find articles in the international press that contain sentences such as, “Google plans to stop trusting current Symantec certificates.” However, such headlines seem to come out of thin air, as they are all about certificates issued before June 1, 2016. These also retain the usual compatibility after a free certificate replacement (re-issue), even after April 2018. Continue reading

Onwards from November 2014, You May Experience Difficulties When Trying to Connect to Your MS Exchange Server

Many businesses rely on the Microsoft Exchange Server for their internal and external messaging. The Exchange Server is usually designated as “server“ or ”server.local“ within the internal network.

Continue reading