GlobalSign has initiated a new wave of SSL/TLS certificate revocations for Russian websites. To date, a total of 11,000 certificates have been revoked from 1,300 Russian organizations by international certification authorities.
GlobalSign accounted for 4,830 of these revocations, while the Greek authority HARICA revoked 3,456. The revocations primarily target entities listed on EU and US sanctions lists, in compliance with CA/Browser Forum requirements.
New CA/Browser Forum rules effective May 2026 mandate that certification authorities must verify applicants against OFAC SDN and other sanctions lists. Consequently, GlobalSign began mandatory revocations in June 2026, while Let's Encrypt updated its terms to restrict services for sanctioned entities.
The Russian Ministry of Digital Development warns that revoked certificates may cause connection errors in browsers like Chrome, Safari, and Edge. The ministry advises installing Russian-issued security certificates to maintain site accessibility.
Russian website owners can obtain domestic TLS certificates free of charge via the Gosuslugi portal. The ministry states that applications for DV and OV type certificates are processed within three business days.
