IdentTrust DST Root CA X3 Root SSL Certificate Expiration

Incident Report for Edlio

Resolved

Edlio will continue to monitor our systems and services to avoid any disruption.

Posted Sep 30, 2021 - 23:02 PDT

Monitoring

Customers can validate the certificates served by Edlio systems for their sites are indeed valid with these tools:
- https://www.digicert.com/help/
- https://www.ssllabs.com/ssltest/index.html

Posted Sep 30, 2021 - 17:38 PDT

Identified

On September 30, 2021 @ 7:01am PDT the DST Root CA X3 Root SSL certificate that is widely embedded in devices (since the year 2000) expired.

Customers accessing Public Edlio CMS sites need to make sure they are using updated devices (firewalls, operating systems, and browsers) that properly ignore the expired root certificate.

More info can be found here:
- https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/

To test your device for compatibility, try visiting BOTH these sites in a web browser. If either of these returns an SSL error then your device, operating system, browser or network device (gateway/firewall/web content filter) is out-of-date:
- https://helloworld.letsencrypt.org/
- https://valid-isrgrootx1.letsencrypt.org/

Posted Sep 30, 2021 - 10:27 PDT

This incident affected: Edlio CMS Websites (US & LATAM) (Public Sites).