All TCS server certificates issued between March 27, 2026, and July 20, 2026, inclusive, will be revoked on Saturday, July 25.
Other certificates (personal and bot certificates) are not affected by this revocation.
Please renew your affected certificates as soon as possible; ideally, set up automated renewal using the ACME protocol if you haven’t already done so.

HARICA, our external TCS certificate provider, issued certificates in violation of its certificate policy (hereinafter referred to as CP/CPS). Once such a violation is detected, the regulations of the governing body, the CA/B Forum (an association of CAs and browser vendors primarily controlled by Google, Apple, Microsoft, and Mozilla), require that the affected certificates be revoked within five calendar days.

Two such violations were found.

• On February 15, 2025, Chrome announced that, effective June 15, 2026, its v1.6 policy store would no longer support certificates containing the clientAuth property.
• On March 14, 2025, HARICA updated its CP/CPS v4.9 in accordance with this Chrome policy and stated that certificates would not include the aforementioned capability.