> Source: [sk183884](https://support.checkpoint.com/results/sk/sk183884) # sk183884 - VPN/Remote Access Security Gateways Using DigiCert/GeoTrust CA | Property | Value | |----------|-------| | Solution ID | sk183884 | | Date Created | 2025-08-29 | | Last Modified | 2025-11-19 | | Technical Level | General | | Products | Security Gateway | | Versions | R82.10, R82, R81.20, R81.10 (EOS), R81 (EOS) | | OS | Gaia | ## Solution DigiCert has [announced](https://docs.digicert.com/en/whats-new/change-log/certcentral-change-log.html#important-http-protocol-changes-for-ocsp-and-crl-certificate-status-checks-619426) that starting 22 September 2025, they will only support Hypertext Transfer Protocol (HTTP)/1.0 with a proper "Host" header, HTTP/1.1, and HTTP/1.2 connections for Online Certificate Status Protocol (OCSP) and certificate revocation lists (CRL) checks. There is **no need** to update your Check Point Security Gateways for Site-to-Site VPN, Remote Access VPN, and Outbound HTTPS Inspection for sites working with a DigiCert-generated certificate. These services will continue to operate smoothly beyond the 22 September 2025 timeline, even without applying the hotfix in advance. That said, our latest Jumbo Hotfix Accumulator changes the communication method from HTTP/1.0 to HTTP/1.1, ensuring long-term compatibility with all certificate authority services looking ahead. ### Recommended step - Install Jumbo Hotfix Accumulator {#Jumbo} The fix is included in these Jumbo Hotfix Accumulators: **Note that Check Point Recommended version for all deployments is [R82](https://support.checkpoint.com/results/sk/sk181127) with its [Recommended Jumbo Hotfix Accumulator](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) Take.** |---------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------| | Version | Take # | | **R82** Jumbo Hotfix Accumulator | [Latest Take 41](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/R82.00/R82_Downloads.htm) | | **R81.20** Jumbo Hotfix Accumulator | [Latest Take 115](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/R81.20_Downloads.htm) | | **R81.10** Jumbo Hotfix Accumulator | [Recommended Take 181](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/R81.10/R81.10_Downloads.htm) | | Jumbo Hotfix Accumulator for**Quantum Force 3900 Appliances** | [Latest Take 22](https://support.checkpoint.com/results/sk/sk183557) | {#Unique_ID_HotfixesTable} For earlier Jumbo Hotfix Accumulator Takes and earlier versions, install the hotfix from the table below.
### Hotfix that updates Security Gateway / Quantum Spark Gateway to use HTTP 1.1 by default for CRL validation {#2} The Hotfix is available for **manual download** from this table: * **For Quantum Security Gateways / Cluster Members / Scalable Platform Security Groups:** |----------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------| | Hotfix on Top of | Download Link | | **R82.10** | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139491) (TAR) | | **R82** Jumbo Hotfix Accumulator Take 39 | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139492) (TAR) | | **R82** Jumbo Hotfix Accumulator Take 36 | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139493) (TAR) | | **R82** Jumbo Hotfix Accumulator Take 34 | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139494) (TAR) | | **R81.20** Jumbo Hotfix Accumulator Take 113 or Take 111 | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139495) (TAR) | | **R81.20** Jumbo Hotfix Accumulator Take 105 | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139496) (TAR) | | **R81.10** Jumbo Hotfix Accumulator Take 177 | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139497) (TAR) | | **R81** Jumbo Hotfix Accumulator Take 107 | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139498) (TAR) | | **R80.40** Jumbo Hotfix Accumulator Take 211 | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139499) (TGZ) | * For hotfix installation instructions on Quantum Security Gateways, see: [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597). * Customers who run earlier Jumbo Hotfix Accumulator Takes, must upgrade to the relevant Jumbo Hotfix Accumulator Take that is listed in the table above. * Customers who run earlier versions, must upgrade to one of the supported versions. **For Quantum Spark Appliances:** |------------------|---------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------| | Hotfix on Top of | Appliance Model | Download Link | | **R82.00.00** | **2580 2570 2560** | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139485) (IMG) | | **R82.00.00** | **2550 2530** | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139484) (IMG) | | **R81.10.17** | **2000 1900 1800 1600** | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139483) (IMG) | | **R81.10.17** | **1595 1590 1575R 1575 1570R 1570 1555 1550 1535 1530** | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139481) (IMG) | | **R81.10.17** | **1595R** | [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk110426/arrow.png)](https://support.checkpoint.com/results/download/139482) (IMG) | * For the image upgrade instructions on Quantum Spark Gateways, see: [R81.10.X Quantum Spark Locally Managed Administration Guide](https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/Backup-Restore-Upgrade-and-Other-System-Operatons.htm#Using_the_Software_Upgrade_Wizard). * Customers who run earlier versions, must upgrade to one of the versions listed in the table above. --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content