SSL certificate renewal – nShift Transsmart Help Center

In the morning of November 17th, at 8.00h CET, we will be renewing the SSL certificate for Transsmart.

Normally we don't send notifications for SSL renewals anymore, as mentioned in an earlier message, but in this case, we would like to make an exception.

We have noticed that some customers were impacted when we renewed the SSL certificate on our acceptance environment. Their CA trust stores were not up-to-date, or they had a hard dependency on the exact SSL certificate.

The ever decreasing validity period for new SSL certificates (only 100 days in 2027, only 47 days in 2029, cfr link https://www.globalsign.com/en/blog/navigating-the-47-day-ssl-tls-certificate-validity-era] forces everyone to automate renewals and update security controls regularly. An SSL certificate renewal should then no longer break integrations to third party systems.

Also Certificate Authorities are stepping up. For instance, by creating TLS-only root certificates, instead of multi-purpose roots.

As a result the new SSL certificates for Transsmart were issued by GlobalSign from a new root and intermediate certificate.

You can download these here:

Make sure your system recognizes these as trustworthy certificates. This will ensure the communication towards Transsmart isn't broken. Please forward this information to your system administrator. That person might not have to do anything with it, but better be safe than sorry.