Knowledge Base

Starting May 30, 2023, DigiCert requires private keys for code signing certificates to be stored on hardware certified as FIPS 140-2 level 2, Common Criteria EAL 4+, or equivalent that supports 3072-bit or larger keys.

This page contains the DigiCert dedicated IP addresses for DigiCert Online Certificate Status Protocol (OCSP), Certificate Revocation List (CRL), and a few other DigiCert services.

To run your applications on Adobe AIR, you must digitally sign them first.

If you already set up your code signing certificate and are ready to sign your Java .jar files, go to our Sign Java .jar files with jarsigner instructions below.

Depending on your firewall configurations, you may need to "allow-list" DigiCert IP addresses for the HTTP token domain approval process to go through.

1. Create an ACME Directory URL from CertCentral.

Install the Web Extension from the Chrome Web Store. This is mandatory if customers want to use PKI Client on Chrome.

An RFC3161 timestamp server provides an essential function in protecting data records for the long-term.

This article walks you through the steps to set up a Token on a Linux system and guides you on how to use the token once set up.

To install an agent in one or more servers at a time, refer to the attached guide and follow the instructions.