SSL certificate renewals: attracs.com
⚠️ Legacy (DigiCert-era). SSL certificate renewal has moved to one current, unified process — Let's Encrypt automation + Ahola Group Vault (https://vault.aholagroup.com/), ~90-day certs. See: SSL certificate renewals: Current process (2026). This page is kept for reference only.
Get new certificate from Digicert
Deploy certificate to * GCP Load Balancer * Update according to GCP manuals (or via ansible) * LB ➝ attracs-logistics * LB ➝ attracs-logistics-nightly * LB ➝ attracs-devops * LB ➝ attracs nightly services * LB ➝ Attracs Services * LB → eazytms-nightly * LB → eazytms * Hetzner frontends * Update via ansible, notice all frontends (frontend, internal, meshmoon) * online2.attracs.com * Use powershell/ui to update in the same way as first time installation. Do note this: https://www.em-soft.si/myblog/elvis/?p=984 (some browsers cache old cert and might give an error) * ~~online.attracs.com~~ * ~~https://docs.citrix.com/en-us/citrix-adc/current-release/ssl/ssl-certificates/add-group-certs.html#update-an-existing-server-certificate~~ * ~~org1000appserver~~ * ~~cramo.attracs.com~~~~, switch newer certificate~~ * ~~xenapp2~~ * ~~IIS~~ * wac.attracs.com * update certificate on rdsbroker
Test certificates with couple of browser and for example digicert test
To check certificate alerts:
cat star_attracs_com.crt DigiCertCA.crt > star-attracs-com-2025.pem
convert base64 to pfx
base64 -d cert_base64.txt > certificate.crt