Entrust Public-Facing Certificate Lifecycle Notice - Amazon Trust Services

Scheduled for Oct 1, 19:00 UTC  -  Oct 8, 19:00 UTC

Scheduled

As part of ongoing certificate lifecycle maintenance for public-facing TLS certificates supporting Entrust PKIaaS, we will be rolling out certificates issued from Amazon Trust Services.

Expected Impact: While the change should be transparent for most users as the Amazon Trust Services certificate chain is already ubiquitous across all browsers, we do want to raise awareness of the change in the event that there are any use cases requiring certificates to be implicitly trusted.

The new Amazon Trust Services certificate chain can be downloaded via: https://aws.amazon.com/blogs/security/how-to-configure-and-verify-acm-certificates-with-trust-stores/#BestPractices
Posted Oct 01, 2026 - 18:46 UTC
This scheduled maintenance affects: pkiaas-us (US PKIaaS CAGW, US PKIaaS CRL, US PKIaaS IdP, US PKIaaS Intune, US PKIaaS MDM SCEP, US PKIaaS MDM WS, US PKIaaS OCSP, US PKIaaS Satellit, US PKIaaS WSTEP) and pkiaas-eu (EU PKIaaS CAGW, EU PKIaaS CRL, EU PKIaaS IdP, EU PKIaaS Intune, EU PKIaaS MDM SCEP, EU PKIaaS MDM WS, EU PKIaaS OCSP, EU PKIaaS Satellit, EU PKIaaS WSTEP).