The consequences of that are as broad and varied as our individual systems are, and many times cascading failures or 'downstream' failures will lead to problems with entirely different systems than the one with the original certificate trust problem,' Callan said.Īccording to Callan, who serves as chief compliance officer at Sectigo, most modern software allows the use of sophisticated trust chains that will enable root transitions without requiring the replacement of production certificates. 'If software depends on an expired root to validate the trust chain for a certificate, then the certificate's trust will fail, and in most cases, the software will cease to function correctly. Additionally, we are working on a longer-term solution to address this edge case issue directly within our product,' the company said in a statement.ĭigital certificates expert Tim Callan said all modern digital systems depend on certificates for their continued operation, including those that secure our cyber and physical environments. 'We are communicating directly with customers and have provided a temporary workaround. Fortinet told ZDNet they were aware of and have investigated the issue relating to the expired root CA certificate provided by Lets Encrypt.

Apple sandbox certificate not trusted