Manage Distrust Certificates

The recent announcement regarding Google Chrome's decision to distrust Entrust (Certificate Authority) has sparked an urgent need for many organizations to update and secure their operations. We are fully prepared to assist you with obtaining replacement certificates or with automating your certificate lifecycle, ensuring your operations remain seamless and secure.

Action Required for Website Operators: Transition to a New Certificate Authority

Affected website operators are advised to switch to a new publicly trusted certificate authority as soon as possible. This change is crucial for maintaining website trustworthiness and security for users accessing sites through Google.

Deadline for Completion

The transition to a new CA must be finalized before the current Entrust-issued certificates expire. Priority should be given to certificates expiring after October 31, 2024, to ensure continuity in trust and access.

Implementation 

  1. Identify certificates that are issued by Entrust.

    Use the tokens certificate:(browserDistrust:potential),certificate:(browserDistrustExpiryGroup:)certificate:(browserDistrustIssuedByEntrust:)

    view distrust cert.

  2.  Select a new publicly-trusted CA and initiate the process for obtaining new certificates.
  3. Update your systems with the new certificates well before the October 31, 2024, deadline to avoid service disruptions.

For guidance on selecting a new CA, refer to the Configure Certificate Authorities section of the Certificate View online help.

For more insight into Google Chrome’s new Entrust Certificate policy using Qualys Certificate View, refer to our blog section here.

Additional Dashboard Widget for Entrust Certificates

We have also introduced dashboard widgets for identifying certificates issued by Entrust and taking necessary action to update your systems with the new certificates issued by trusted authorities.

You can import the JSON file to use this dashboard. Click here to download the file.

To know more about how to import the dashboard, refer to the Qualys Unified Dashboard Online help. 

Related Topics

Configure Certificate Authorities in Certificate View

Import Leaf Certificates in Certificate View

Renew your Certificates in Certificate View