Sectigo AddTrust expiration External CA Root Expiring May 30, 2020


For more info and the fix see

To update the Root CA Certificate on Ubuntu use the below commands

Log in to the USS Gateway device as a root user (see Accessing the Command Line)

Run: nano /etc/ca-certificates.conf and use the arrow keys to find the line containing “AddTrust_External_Root.crt” or “AddTrustExternalRoot.crt”

Delete the whole line

Save the file by holding down Ctrl and pressing the letter O and then and exit by holding down Ctrl and pressing the letter X

Remove the old AddTrust_External_Root.crt certificate file by running the following commands. One command may fail, this is expected as it will be in one of the two locations depending on your system.

rm /usr/local/share/ca-certificates/AddTrustExternalRoot.crt
rm /usr/share/ca-certificates/mozilla/AddTrust_External_Root.crt

Run: update-ca-certificates --fresh

Run: /etc/init.d/uss-squid stop

Wait 10 seconds

Run: /etc/init.d/uss-squid start

Found priceless insights in this blog? Support the author’s creativity – buy them a coffee!

Leave a Reply

Your email address will not be published. Required fields are marked *