Expired Root Trust SSL Certificate - affecting some client systems where Intermediate Cert is manually added
Incident Report for Modica Group Limited
Resolved
At 22:48 NZST May 30 (10:48 2020 UTC) a USERTrust Root Certificate expired that was part of our SSL certificate chain. This expired certificate was not actually required, it was only present due to a transition of root certificates by the issuing company Sectigo. The intermediate CA certificate is cross-signed by the current USERTrust root certificate which expires in 2038.

We have removed the expired root certificate from our trust chain across all our systems.

Unfortunately, the USERTrust Root Certificate expiring has affected some of our customers that have systems that required an Intermediate Certificate to be manually added to their trust store.

If your systems have been affected and/or they require the certificate chain to be manually installed we recommend using the latest intermediate CA certificate available on the following pages;

https://confluence.modicagroup.com/display/DC/*.modicagroup.com
https://confluence.modicagroup.com/display/DC/gateway.sonicmobile.com

If you are still encountering issues or you require further information, please contact our support team.

Regards,
Modica Support Team
support@modicagroup.com
Posted May 31, 2020 - 12:39 NZST
This incident affected: Omni - Applications (Mobile Gateway (API)).