CA Root Upgrade for GeoTrust Certificates
GeoTrust has completed upgrading its public root certification authorities (CAs) to the 2048-bit “GeoTrust Global Root CA”. All SSL certificates are now being signed from an intermediate CA under the GeoTrust Global Root CA, creating a stronger, chained CA hierarchy. Existing valid certificates issued off of old 1024-bit RSA keys will continue to operate correctly and securely with no action required on the part of customers. All new, renewed or reissue certificate requests are being issued under the GeoTRust Global Root CA.
What does this change mean to the Vanderbilt community?
Customers who submit a SSL Certificate Request through the Vanderbilt Software Store should reference a CSR with a minimum 2048 bit key size. Please see https://knowledge.geotrust.com/support/knowledge-base/index?page=content&id=AR892&actp=search&viewlocale=en_US&searchid=1282929612009 for information on how to generate a CSR with a 2048 key bit length.