Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 14 replies
  • Subscribers 7 subscribers
  • Views 2961 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Certificate Expiration Email

MikeRM275

Hello,

   For the past couple of days I have been getting an email that 1 certificate will expire in the next 30 days:  B8C3B0C19BA3F1BE

I do not have any Lets Encrypt certificates set up, and I do not see this certificate when going to WebServer Protection > Certificate Management in the Certificates or Certificate Authorities tabs.  Does anyone know where I might be able to find this certificate?

Thank you in Advance,

Mike



This thread was automatically locked due to age.

Top Replies

  • in reply to MikeRM275 +1 verified

    So it looks like this is the Proxy CA...

    Usually, the notification explicitly calls it the Proxy CA, so I wonder if this isn't an old one no longer in use.

    To confirm, run certificates in Windows, and open the MRM2 Inc Proxy CA in 'Certificates' in 'Trusted Root Certification Authorities' to confirm that it's about to expire.  If so, you might download the PEM of the Proxy CA on the 'HTTPS CAs' tab of Web Filtering and open it with Notepad to confirm that it's the same one in your Windows Certs.  If so, then [Regenerate] and install the new Procy CA on all clients.

    Cheers - Bob

    Jump to answer
  • 0 in reply to BAlfson

    Well I do not happen to have it on this computer, and have checked a few of the servers.  But I did download the PEM and opened it with Notepad.  The Serial Number matches.  And I now have a clear date as to when it will drop dead.  

  • 0 in reply to MikeRM275

    Just out of curiosity, would this be at all tied to any expiring licensing for Sophos?

    XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | GB Ethernet x5

  • 0 in reply to Alan Brand

    Alan, ask your reseller for a 2-day demo license that includes Web Protection so that you can regenerate the Proxy CA.  Alternatively, you could open a Support ticket for them to fix this at the command line.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to Amodin

    No, I don't think so the dates between the Certificate and the license expiration are over a month apart, and the Certificate that I have expiring curiously was generated on the same day that I had to fix a CRL issue on my Certificate Authority servers.  But it looks like the Proxy CA was valid for 26 months.