Ask a Question

Advanced Search

Alert ID : AL220622171639

Last Modified : 11/14/2022

New Dedicated IP Addresses

URGENT

Description

Update: IP Address change postponed until February 15. 2023

When notifications were sent out in June 2022 about the IP address change, one of the IP addresses was incorrect. The same iP address was incorrect in this change log too. To provide you with time to verify and update the IP addresses in your allowlist, we have postponed the IP address change until February 2023.

What if I already updated my allowlists?

Verify that the IP addresses in your allowlist match the IP addresses in the New IP addresses column in the DigiCert services new dedicated IP addresses table below.

What do I need to do?

On February 15, 2023, at 08:00 MST (15:00 UTC), DigiCert will assign new dedicated IP addresses to TLS Online Certificate Status Protocol (OCSP), TLS Certificate Revocation List (CRL), and a few other DigiCert services.

Does your company use allowlists?

  • If not, no action is required. Your services will continue to work as before the change to the new IP addresses.
  • If yes, you need to update your allowlists to include the new IP addresses by February 15, 2023, to keep your DigiCert services running as before the change to the new IP addresses.

Did you already update your allowlist?

You need to verify that the IP addresses in your allowlist match those in the New IP addresses column in the DigiCert services new dedicated IP addresses table below and date them as needed.

Affected services

  • TLS OCSP
  • TLS CRL
  • PKI Platform 8 CRLs
  • PKI Platform 8 Certificate Authority (CA) certificates
  • PKI client download

DigiCert services new dedicated IP addresses

Service URL New IP addresses
TLS OCSP ocsp.digicert.com
  • 192.229.211.108 - same as before
  • 192.229.221.95 - updated
  • 152.195.38.76 - same as before
  • 192.16.49.85 - same as before
TLS CRL

crl3.digicert.com

crl4.digicert.com

PKI Platform 8 CRLs See the attached csv file.
PKI Platform 8 CA certificates See the attached csv file.
PKI client download

pkiclient-updater.digicert.com

pki-downloads.digicert.com