Cxense's response to Google Chrome's plan to distrust Symantec Certificates

Background

This Google Security Blog article explains the details for the Chrome team and the PKI community converged upon a plan to reduce, and ultimately remove, trust in Symantec’s infrastructure in order to uphold users’ security and privacy when browsing the web.

Cxense's response

The only service where Cxense uses Symantec Certificates is the Akamai provided secure CDNs served from the URL: https://scdn.cxense.com, https://content-thumbnail.cxpublic.com and various others, mostly under cxpublic.com.

Akamai have laid out their plans for managing the transition in this blog post:

https://community.akamai.com/community/web-performance/blog/2017/08/29/google-symantec-subca-transition

Cxense will initiate an early renewal of the affected certificates.

Current status

Google Chrome is currently displaying warnings about the impending removal of trust of Symantec certificates. You may see these warnings when using Chrome's Developer Tools (F12) when you load a page over the HTTPS protocol that needs resources from our various secure CDN hosted web properties.

Updates:

2018-03-07 - Cxense is in the process of performing early renewal of the Akamai-hosted certificate for cdn.cxense.com (and other cxense.com properties hosted with Akamai). When this is finished, we no longer have services using Symantec certificates.

2018-03-08 -R&D has informed that the certificates renewal process has been completed and the new certificate installed on our domain. The warning in Chrome's Developer Tools will not be visible anymore.

Articles in this section

Background