Re: SHa 1

[Raul A Jager W <raul@xxxxxxxxxx>]

Thank you Tim, I found:

Issued to: Symantec Class 3 Secure Server SHA256 SSL CA
Issued by: VeriSign Universal Root Certification Authority
Valid from: 4/8/2013 to 4/8/2023
Serial Number: ‎‎‎‎69 87 94 19 d9 e3 62 70 74 9d bb e5 9d c6 68 5e

Intermediate CA
And a certificate in a rectangle in grey background.
Can I donload it an install it with DCM?
Do I need to do something else?
___________________________________________________________________


On 05/09/2016 10:23 AM, Tim Bronski wrote:
> You cannot just "replace" a certificate in a chain. If an intermediate
> certificate is revoked or otherwise invalidated then all subordinate
> certificates signed by that certificate will need to be replaced with
> new ones. In your case however the SHA1 signed certificate is the root
> certificate. A root certificate isn't validated by its signature; the
> fact that it's the root is trust enough.
>
> On 5/9/2016 4:02 PM, Raul A Jager W wrote:
> > I just put my new in line and when I verified the SSL I found an
> > intermediate certificate that uses SHA1. The server is working, but I
> > will like to resolve this issue.
> >
> > The i is in v7.2, and you can see the details of the problem clicking on
> > the lock for https://i5.abc.com.py
> >
> > Can I just install a new intermediate certificate? Where can I find it?
> > Is there some special procedure for the i to use the new certiicate?
> >
> > TIA
> > Raúl
> >
> > -- Este e-mail fue enviado desde el Mail Server del diario ABC Color --
> >              -- Verificado por Anti-Virus Corporativo Symantec --


-- Este e-mail fue enviado desde el Mail Server del diario ABC Color -- 
            -- Verificado por Anti-Virus Corporativo Symantec --