Our dedicated Product Specialist team is always ready to help you when you need it the most.
Contact Support
Specops Infrastructure Change
We’re making changes to our hosting infrastructure to improve certificate management and support future updates to our services. As part of this change, we’re adding Amazon Trust Services and Digicert as a certificate authority, alongside our existing certificate providers.
Action Required
- If your organization restricts outbound network traffic using firewall or proxy allowlists, you may need to update your configuration to allow access to the certificate validation endpoints listed below.
- These requirements apply across Specops products and replace the separate certificate endpoint lists previously provided in our documentation.
- If your network already permits access to these certificate validation services, no action is required.
The updated URL Allowlists are available here in the linked product documentation for Specops Authentication and for Specops Password Policy.
The new list of certificate providers:
| Issuer | CRL endpoint | Protocol | Port | Source documentation |
| Let’s Encrypt | https://*.c.lencr.org | TCP | 443 | Let’s Encrypt Certificates |
| Let’s Encrypt | http://*.c.lencr.org | TCP | 80 | Let’s Encrypt Certificates |
| GoDaddy | https://crl.godaddy.com | TCP | 443 | GoDaddy Repository |
| GoDaddy | http://crl.godaddy.com | TCP | 80 | GoDaddy Repository |
| Microsoft | http://www.microsoft.com/pkiops/crl/* | TCP | 80 | Microsoft PKI Repository |
| Amazon | http://*.amazontrust.com | TCP | 80 | Amazon Trust Services Repository |
| Amazon | http://*.amznts.eu | TCP | 80 | Amazon Trust Services Repository |
When Should I Take Action By?
The new certificate authorities will be used from December 7th 2026. If you have questions or need help, please reach out to our Support team.
Kind regards,
Specops Product Team