PCI Production CDS certificates expire on January 27th. From the AOC Consortium we will change the CDS certificates on Thursday, January 21 at 15 p.m.. We already have the new certificates and the roots are different from the current ones, so you will need to review your truststore to see how you have set up trust with our URLs.
As indicated in the PCI generic messaging integration document in 2.2.2, the following URLs will expire the certificate:
Interoperability Cluster (IOP)
| Frontal synchronous | https://serveis.iop.aoc.cat/siri-proxy/services/Sincron |
| Asynchronous front | https://serveis.iop.aoc.cat/siri-proxy/services/Asincron |
| Asynchronous-response frontal | https://serveis.iop.aoc.cat/siri-proxy/services/AsincronResposta |
Application cluster (APP)
| Frontal synchronous | https://serveis.app.aoc.cat/siri-proxy/services/Sincron |
| Asynchronous front | https://serveis.app.aoc.cat/siri-proxy/services/Asincron |
| Asynchronous-response frontal | https://serveis.app.aoc.cat/siri-proxy/services/AsincronResposta |
The new certificate is issued by the new root "Public Sector". Therefore, you need to add the following roots to your truststore:
1.- key of the CATCert certification body (1,34 kB)
2.- key of thecertification body Public Sector
If you need the final server certificate instead of the root, please let us know and send it to your mailbox.
