Skip to main content

TCC25-0101 -UPDATE 1- SSL CERTIFICATE UPDATE - APPS.CBSA Domain

UPDATE 1:

ADDITIONAL STEPS

To ensure full compatibility with certificate chaining, please also add these certificates IN ADDITION to the certificates listed in the notification below sent on Thursday July 30.

Updated Subject: /C=US/O=SSL Corporation/CN=SSL.com TLS RSA Root CA 2022
Serial Number: 6FBEDAAD73BD0840E28B4DBED4F75B91
SHA-1 Fingerprint: EC:2C:83:40:72:AF:26:95:10:FF:0E:F2:03:EE:31:70:F6:78:9D:CA
download PEM format
download DER format
 
Updated Subject: C=US, O=SSL Corporation, CN=Entrust OV TLS Issuing RSA CA 1
Serial Number: 6FE63EDE5FC1C03AFB6D7A85BD3A156D
SHA1 Fingerprint: CA:AA:C3:E1:6B:D2:42:66:88:7C:C8:56:73:C0:18:F4:6A:13:9B:0F
Download PEM format
Download DER format

__________________________________________________________________________________________________
We are reaching out to inform you of a development regarding digital certificates issued by Entrust. Due to events impacting Entrust’s trust status across major platforms and browsers, it is necessary to transition to an alternative SSL certificate provider to ensure the continued security and accessibility of your services.

To prevent potential disruptions and maintain compliance with industry security standards, we strongly recommend updating certificate keystores and places that contain Certificate Authorities / Intermediate Authorities that are used to access (Apps.cbsa-asfc.gc.ca) currently issued by Entrust.  
 

Action Required

Please ensure that all certificate keystores and places that contain Certificate Authorities / Intermediate Authorities are updated with the SSL.COM Root CA and Intermediate Authorities no later than 03:00 (ET) on August 4th 2025.
 

Should new information be available, it will be shared as soon as possible.
CA Repository - SSL.com
 

Navigate to SSL.com Root and Intermediate Certificates

SSL.com Root CA Certificates -> SSL.com Root CA Certificates

Subject: /C=US/ST=Texas/L=Houston/O=SSL Corporation/CN=SSL.com EV Root Certification Authority RSA R2
Serial Number: 56B629CD34BC78F6

SSL.com Intermediate CA Certificates

Subject CN: SSL.com EV SSL Intermediate CA RSA R3,O = SSL Corp,L = Houston,ST = Texas,C = US
Serial Number: 03:A3:F4:D0:60:30:52:A3:37:CE:38:0A:88:30:31:8C

Download and implement where required.
 


TCC25-0101 - MISE À JOUR 1- DU CERTIFICAT SSL - APPS.CBSA Domain

Mise à jour 1:

ÉTAPES SUPPLÉMENTAIRES

Pour garantir une compatibilité totale avec le chaînage de certificats, veuillez également ajouter ces certificats EN PLUS des certificats répertoriés dans la notification ci-dessous envoyée le jeudi 30 juillet.


Updated Subject: /C=US/O=SSL Corporation/CN=SSL.com TLS RSA Root CA 2022
Serial Number: 6FBEDAAD73BD0840E28B4DBED4F75B91
SHA-1 Fingerprint: EC:2C:83:40:72:AF:26:95:10:FF:0E:F2:03:EE:31:70:F6:78:9D:CA
download PEM format
download DER format
 
Updated Subject: C=US, O=SSL Corporation, CN=Entrust OV TLS Issuing RSA CA 1
Serial Number: 6FE63EDE5FC1C03AFB6D7A85BD3A156D
SHA1 Fingerprint: CA:AA:C3:E1:6B:D2:42:66:88:7C:C8:56:73:C0:18:F4:6A:13:9B:0F
Download PEM format
Download DER format
_____________________________________________________________________________________________________________________________________________________________

Nous vous contactons pour vous informer d'une évolution concernant les certificats numériques émis par Entrust. En raison d'événements affectant le statut de confiance d'Entrust sur les principales plateformes et navigateurs, il est nécessaire de passer à un autre fournisseur de certificats SSL afin de garantir la sécurité et l'accessibilité continues de vos services.

Afin d’éviter d'éventuelles perturbations et maintenir la conformité avec les normes de sécurité du secteur, nous vous recommandons fortement de mettre à jour les magasins de clés de certificat et les emplacements contenant les autorités de certification/autorités intermédiaires utilisées pour accéder (Apps.cbsa-asfc.gc.ca) actuellement émis par Entrust.

Action requise

 

Veuillez vous assurer que tous les magasins de clés de certificat et les emplacements contenant des autorités de certification/autorités intermédiaires sont mis à jour avec l'autorité de certification racine SSL.COM et les autorités intermédiaires au plus tard à 03h00 (HE) le 4 août 2025.

 

Si de nouvelles informations sont disponibles, elles seront partagées dès que possible.


CA Repository - SSL.com
 

Naviguez à SSL.com Root and Intermediate Certificates

 

SSL.com Root CA Certificates -> SSL.com Root CA Certificates


Subject: /C=US/ST=Texas/L=Houston/O=SSL Corporation/CN=SSL.com EV Root Certification Authority RSA R2
Serial Number: 56B629CD34BC78F6


SSL.com Intermediate CA Certificates


Subject CN: SSL.com EV SSL Intermediate CA RSA R3,O = SSL Corp,L = Houston,ST = Texas,C = US
Serial Number: 03:A3:F4:D0:60:30:52:A3:37:CE:38:0A:88:30:31:8C


Téléchargez et implémentez là où c'est nécessaire.
 

 

Topic(s)

Release
System Updates/Outages & Delays at the Border

Information source

Canada Border Services Agency (CBSA)
Disclaimer

The foregoing information is provided for informational purposes only and is not intended as, nor should it be considered, professional advice or a substitute for conducting your own thorough research and review. Before making any decisions or taking any action based on the information provided, you should conduct your own independent investigation and/or seek professional advice from a qualified expert in the relevant field. The CSCB disclaims all liability for actions taken or not taken based on the information provided.