Caterpillar API Hosts Certificate Update – Fall 2024
We rotate our hosts' TLS certificates every 6 months. This has a few benefits:
- New certificates can be shared in advance without affecting the current certificate.
- The old certificate will have 6 months before it expires, allowing ample time to back out and re-implement if needed.
TIMELINE
- Non-production will change on September 1, 2024.
- Production will change on October 1, 2024.
The new certificate's hierarchy is the same as the current certificate. Typically, applications only save the "root" certificate into their app's trust store. The "root" certificate is available to download from DigiCert. If this is the case for your app, then no further action is required.
If your application has implemented "certificate pinning," then you must download and install the new “leaf” certificates and save them in your app's trust store. Make sure to load the new certificate in addition to any certificates you already have. Do not remove or replace any certs you may already have unless they have expired. After downloading these files, rename them and remove the ".txt" extension.
Note: Certificate pinning is not recommended due to reasons mentioned here.
Non-Production Hosts
SUBJECT NAME: API-DEV.CAT.COM
- api-dev.cat.com
- api-qa.cat.com
- api-int.cat.com
- api-stage.cat.com
- api-performance.cat.com
- apidev.catdevservices.com
- apiqa.catdevservices.com
- apistage.catdevservices.com
- apiperformance.catdevservices.com
- services-dev.cat.com
- services-int.cat.com
- services-qa.cat.com
- services-perf.cat.com
- services-stg.cat.com
- services-performance.cat.com
SUBJECT NAME: API.CAT.COM
- api-sandbox.cat.com
- apisandbox.catdevservices.com
- services-sandbox.cat.com
Production Hosts
SUBJECT NAME: API.CAT.COM
- api.cat.com
- api.catdevservices.com
- services.cat.com
