New TLS certificate for .herokuapp.com hostnames
source link: https://devcenter.heroku.com/changelog-items/1813
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
On Tuesday June 9th 2020 Heroku changed the certificate used forterminating TLS for built-in <appname>.herokuapp.com
hostnames from a certificate issued by DigiCert to one issued by Starfield/AWS
. This change was rolled back on June 10th because a small subset of Heroku customers had pinned apps to the DigiCert certificate or had apps that could not establish a chain of trust with the new certificate for other reasons.
A new DigiCert-signed certificate will replace the current one before June 22nd (when it expires).
Heroku does not guarantee that certificates issued by, or used on, Heroku are issued by a particular certificate authority and we plan to migrate to Starfield/AWS issued certificates in the future. Heroku encourages customers to not pin individual certificates used on Heroku and to ensure that devices interacting with Heroku apps have updated root certificate bundles that are compatible with certificates issued by commonly used certificate authorities.
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK