Information Systems:Website SSL Certificates

Background

uniPHARM hosts several websites using HTTPS and therefore maintains SSL/TLS certificates.

Certificate Details

Website/Service	Provider	Managed By	Notes
unipharm.com	Sectigo	Network Solutions	Exware hosts the site, therefore they provide the CSR, which uniPHARM submits to NS. Cert is provided back to Exware.
medicinecentre.com	LetsEncrypt	Exware	Managed by Exware. This is a LetsEncrypt cert that has 90-day validity. Exware automates the renewals.
secure.medicinecentre.com	Sectigo	Network Solutions	Used for the website Rx refill form
orders.unipharm.com (Web Orders)	Sectigo	Network Solutions	Web Orders
infonet.unipharm.com	Sectigo	Network Solutions	Infonet
nts.unipharm.com	Sectigo	Network Solutions	IBM iNotes webmail access, I think Traveler/Verse app too, to some degree
mail.unipharm.com	Sectigo	Network Solutions	Used for secure mail protocols, webmail client portal
infonext.unipharm.com	LetsEncrypt	uniPHARM IT	Must be auto-renewed.
unipharm.3cx.ca	LetsEncrypt	3CX	Auto-managed by the 3CX software (likely certbot).

Network Solutions certificates must be renewed on a yearly basis.

Notes

• The Network Solutions certificates are signed by the AddTrust/USERTrust root CA. These CAs are owned by COMODO/Sectigo.
• Previously, 2+ year certs were allowed. There was a change in industry that now prevents this to something like 390 days (13 months). Any 2-year options e.g. from Network Solutions is likely now just for accounting/payment convenience i.e. a new cert will still need to be generated ever year.