In this blog, we’ll provide you with an update about what is happening with the Jisc certificate service, what it means for you, and how we plan to assist you going forward.
We’re here to support you every step of the way and truly appreciate your patience and understanding as we work through these changes together. This blog aims to answer some of your FAQs, but please feel free to contact us via certificates@jisc.ac.uk for more information.
Remember you can also join us for our monthly drop-in sessions, aimed to support you with the move to automated certificate management. You can find more details and upcoming dates here. We look forward to seeing you in our next one.
- What prevented the launch of the new service?
We had initially planned to go live with the new Digicert service in January; however, due to a legal challenge, we were unable to proceed with the procurement as originally intended.
To ensure a fair and transparent process, we are now launching a new open procurement. We appreciate your patience as we work towards a solution.
2. What is the anticipated timeline for the new procurement?
Our team is working through the logistics of the open procurement process to ensure we are fully prepared before launching the tender and can provide a clear timeline to members. While we are keen to restore the service as soon as possible, it is essential we conduct due diligence properly, particularly given the potential for legal challenge.
We appreciate the importance of this for your own procurement and business continuity planning and aim to share a timeline as quickly as possible (current estimate: early March 2025).
We understand this may be challenging and completely appreciate if you need to procure certificates independently in the meantime. Please be assured we are working hard to put a new service in place as soon as possible.
3. I depend on this service – can I continue to use Sectigo?
Unfortunately, Jisc are not able to provide an alternative solution for you at this time. We recognise the impact this will have on your organisation and apologise again for any inconvenience caused. Please know this situation is out of our control.
We recommend you take a pay-as-you-go approach to your certificates until a new provider can be appointed by Jisc. We anticipate you will be able to make significant savings versus what you would pay as an individual institution on the open market, once this service becomes available again.
If your concerns are predominantly focused on increased costs, there are some free alternatives that you may wish to consider, although they pose their own risks and limitations. For example, solutions like Let’s Encrypt or BuyPass.
We have already developed some guidance on Let’s Encrypt and will be enhancing this over the coming weeks.
4. What are Jisc doing to support us?
We’re here to support you in multiple ways. Our Service Desk remains available to assist you with any questions or issues 9-5 Monday to Friday. We will continue to host regular drop-in sessions where you can get additional guidance. You can also explore our previous blog posts for helpful resources and updates. We’re committed to making sure you have the correct avenues to continue support you where we can.
5. How can I revoke our certificates with Sectigo?
There are two ways a certificate can be revoked after the 9th of January:
- Sectigo Revocation Portal – https://secure.sectigo.com/products/RevocationPortal
- Ticket Support – https://www.sectigo.com/support-ticket
6. Is there anything I need to do immediately?
No further action is required from Jisc’s perspective, however you should ensure you have another certificate authority in place, until Jisc are able to offer you an alternative solution.
You should continue to monitor your expiring Sectigo certificates. You may also wish to remove the CAA record that allows Sectigo to issue certificates on your behalf.
Pro-rata refunds have already been processed for your subscription, however you can contact certificates@jisc.ac.uk if you have any questions.
7. How can I stay informed about updates?
We will continue to email you with important updates about our procurement plans and drop-in clinics. Information about the drop-in clinics to support the drive to automation will also be published here.
Our team are also available to assist with any questions or concerns you may have about the process. You can contact the service desk team on certificates@jisc.ac.uk
8. Will the service return in the future?
Yes – we are now launching an open procurement process to secure a viable, long-term provider certificate service. This will not provide an immediate fix; we are hopeful to provide in February.
9. Will I receive a refund for my certificate service subscription?
We have now issued pro-rata refunds to all impacted organisations. This will appear as credit on your account.
If you require these monies to be returned to your organisation by way of bank transfer, you will need to complete this email form, confirming your bank details. We will no longer accept requests for refunds after 31/07/2025.
10. How can I get further support or ask questions?
You can reach out to our service desk at any time, via certificates@jisc.ac.uk
We’re committed to aiding and addressing your concerns promptly and will continue to run drop-in clinics to support the drive to automation, as well as addressing new topics such as Post Quantum Cryptography.
We deeply regret any inconvenience this situation has caused and thank you again for your understanding.
If you have any feedback or questions in the meantime, please contact the service desk via certificates@jisc.ac.uk