See below the CA Gateway bugs fixed by Cryptographic Security Platform 1.4.0.

SAN requirements not available on the management console (ATEAM-18953)

The management console does not display the SAN Management section for configuring certificate profile options.

ACME enrollment fails for DigiCert CA (ATEAM‑19194)

CA Gateway does not support enrolling certificates using the ACME (Automated Certificate Management Environment) protocol with a DigiCert certificate authority.

Enrollment fails for users with issued certificates (ATEAM‑18977 & ATEAM-19092)

Enrollment fails for users who already have issued certificates, whether the certificates are valid or revoked.

Logs include HTTP headers (ATEAM-19091 &  ATEAM-19129)

The DEBUG default log level includes the HTTP headers for every request made.

Bug resolution details: set the default log level to INFO.

DigiCert configuration settings not updated (ATEAM-19297)

As described in New features in CA Gateway for Cryptographic Security Platform 1.3.0, DigiCert profile properties now express certificate validity in days rather than years. However, after upgrading a CA Gateway installation in which these properties were already set, you must manually update them as explained below.

To manually update the DigiCert profile properties

1. Edit the CA Gateway configuration as explained in Configuring and deploying CA Gateway.
2. In the Profiles tab, remove the following DigiCert CA profile properties. 
   • Order Validity (year)
   • Certificate Validity (year)
3. Update the values of the following parameters to express the period in days rather than years.
   • Order Validity (days)
   • Certificate Validity (days)