This is an update to our previous communication regarding CeRTNA’s transition to a new certificate vendor, Sectigo (https://www.sectigo.com).

⚠️ The deadline to complete the required workstation updates has been extended to December 31, 2025.
We are requesting confirmation from all counties and agents once the changes have been completed.

New Certificate Vendor - Sectigo

CeRTNA is transitioning to a new certificate vendor, Sectigo (https://www.sectigo.com). Effective immediately, the following changes are required for all ERDS workstations.

⚠️ Please contact your IT department to implement the following updates. These changes must be completed by December 31, 2025, to avoid issues logging into APEX on your ERDS workstation.

 

🔐 Certificate Installation

The CeRTNA Root CA certificate must be installed as a trusted root certificate authority on your ERDS workstation.  Please refer to the following PDF: 

Installing the CeRTNA Root CA Certificate.pdf

🧱 Firewall Configuration

Update your firewall or proxy whitelist settings to allow communication with Sectigo services.

• Wildcard Hostname (preferred):
  *.sectigo.com
• If wildcards are not allowed, whitelist the following hostnames:
  • crl.enterprise.sectigo.com
  • crt.enterprise.sectigo.com
  • ocsp.enterprise.sectigo.com
•  IP addresses for Sectigo services can be found at:
  • https://www.cloudflare.com/en-gb/ips/
  • (Note: IP-based filtering is not recommended.)

 

✅ Confirmation Required

Once the required configuration changes have been completed, please send a confirmation email to greg.dapkus@certnaca.gov.   This will help us track completion and follow up only where needed.

 

 🚨 What Happens After December 31?

Starting January 1, 2026, CeRTNA will begin issuing certificates from the Sectigo platform.
If the required updates have not been completed, users whose certificates expire will be unable to log in to APEX.

 

📞 Need Help?

If you have any questions or concerns, please contact:

Greg Dapkus
Technical Director, CeRTNA
📧 greg.dapkus@certnaca.gov
📞 657-216-1400 (for immediate assistance)