The Japanese certification authority GlobalSign has initiated a new wave of certificate revocations from Russian websites. To date, 11 thousand certificates belonging to 1.3 thousand organizations have already been revoked.
Image Source: Sasun Bughdaryan / unsplash.com
In early November, Rucenter received notification from GlobalSign of its intention to carry out another wave of mass revocation of SSL/TLS certificates from Russian resources. It will affect several dozen certificates of Russian organizations that are on the EU sanctions list. There have been several waves of recalls since this summer; In addition to the Japanese GlobalSign, the Greek certification authority HARICA also did this. HARICA initially issued certificates to organizations that had previously been revoked by GlobalSign; but subsequently the Greek center also began to recall them, and did this in a few seconds, without giving the site owners the opportunity to prepare. To date, foreign centers have revoked 11 thousand certificates from 1.3 thousand organizations – of which 4830 were from GlobalSign and another 3456 from HARICA.
Revocation of certificates can be initiated for various reasons, respondents indicate RBC experts. These may be the requirements of the international consortium CA/Browser Forum, the requirements of the legislation of the country of the certification authority, as well as complaints from third parties. In some cases, Rucenter manages to agree to exclude the certificates of some companies from the list for revocation. GlobalSign began revoking certificates from Russian companies in June. At the beginning of May, new CA/Browser Forum regulations came into force, prohibiting the issuance of certificates to companies on sanctions lists – verification of companies has become mandatory.
An alternative is the National Certification Center of the Ministry of Digital Development – it issues domestic TLS certificates, which, however, only work in Russian browsers. In particular, sanctioned Russian banks were forced to switch to these certificates – as a result, their resources no longer opened normally in most foreign browsers.
If you notice an error, select it with the mouse and press CTRL+ENTER.
