Updating Certificates

To complete this update:

On February 15, 2025, at 10:00 PM (ET), the *esignlive.com Certificate* was updated and re-issued for the following environments:

• US2 Sandbox: February 15, 2025, at 10:00 PM (ET)

• US2 Production: February 15, 2025, at 10:00 PM (ET)

There is no downtime during a Certificate renewal.

How Does This Impact Me?

If you are not an integrated customer and do not trust any of our certificates, there is no action required on your part.

If you have trusted our certificates as recommended, the certificate will be automatically renewed. There is no action required on your part.

If you have trusted our leaf/end-entity or intermediate certificate, you must complete the update by performing the procedure in the next section — What Do I Need to Do? This will ensure that your OneSpan Sign service continues to function normally.

What Do I Need to Do?

To complete this update:

Once the certificate renewal has completed your old certificates will no longer work. You must update to these new certificates as soon as the renewal has completed.

1. Download the certificate that corresponds to your environment by clicking on the link in the following table:

   Environment	Environment URLs	Date of Renewal	Notes
   US2 Sandbox	sandbox.esignlive.com	February 15, 2025, at 10:00 PM (ET)	Current certificate expires February 23, 2026
   US2 Production	apps.esignlive.com	February 15, 2025, at 10:00 PM (ET)	Current certificate expires February 23, 2026

2. Install the new certificate on or after the Date of Renewal listed in the table above.

For more information about configuring certificates, see Getting Started with SDKs.

If you have any questions or concerns, please contact our Support Team. We encourage you to visit the OneSpan Sign Trust Center for regular updates on this matter.

FedRAMP

The existing FedRAMP certificates will soon expire. As such, we will renew these certificates on the following dates:

On November 28, 2025 at 10:00 PM (EST), the certificates for the following Sandbox environments will be updated:

• sandbox-gov.esignlive.com

• signer-sandbox-gov.esignlive.com

On December 5, 2025, at 10:00 PM (EST) the certificates for the following Production environments will be updated:

• gov.esignlive.com

• signer-gov.esignlive.com

There is no downtime during a Certificate renewal.

How Does This Impact Me?

If you are not an integrated customer and do not trust any of our certificates, there is no action required on your part.

If you have trusted our certificates as recommended, they will be automatically renewed. There is no action required on your part.

If you have trusted our leaf/end-entity or intermediate certificate, you must complete the update by performing the procedure in the next section — What Do I Need to Do? This will ensure that your OneSpan Sign service continues to function normally.

What Do I Need to Do?

To complete this update:

Once the certificate renewal has completed your old certificates will no longer work. You must update to these new certificates as soon as the renewal has completed.

1. Download the certificate that corresponds to your environment by clicking on the link in the following table:

   Environment	Environment URLs	Date of Renewal	Notes
   US FedRAMP Sandbox	sandbox-gov.esignlive.com signer-sandbox-gov.esignlive.com	November 28, 2025 at 10:00 PM (EST) * The leaf certificate will be available as of November 17, 2025.	Current certificate expires December 16, 2025
   US FedRAMP Production	gov.esignlive.com signer-gov.esignlive.com.	December 5, 2025, at 10:00 PM (EST) * The leaf certificate will be available as of November 17, 2025.	Current certificate expires December 16, 2025

2. Install the new certificate on or after the Date of Renewal listed in the table above.

Expiring Certificates

If you need the leaf/end-entity certificate before the renewal dates listed above, you may download the soon-to-be expired ones here:

• US FedRAMP Sandbox

• US FedRAMP Production

However, note the following: Once you have downloaded this certificate you will have to rename it as follows:

• Sandbox: sandbox-gov.esignlive.com_san_crt.crt

• Production: gov.esignlive.com_san_crt.crt

You will still have to update to the latest certificate on or after the dates listed above.

For more information about configuring certificates, see Getting Started with SDKs.

If you have any questions or concerns, please contact our Support Team. We encourage you to visit the OneSpan Sign Trust Center for regular updates on this matter.

European

The *esignlive.eu Certificate* expired on February 23, 2025.

As such, we renewed this certificate for the following environments on the following dates:

• EU Production: February 15, 2025, at 4:00 PM (ET)

There is no downtime during a Certificate renewal.

How Does This Impact Me?

If you are not an integrated customer and do not trust any of our certificates, there is no action required on your part.

If you have trusted our certificates as recommended, the certificate will be automatically renewed. There is no action required on your part.

If you have trusted our leaf/end-entity or intermediate certificate, you must complete the update by performing the procedure in the next section — What Do I Need to Do? This will ensure that your OneSpan Sign service continues to function normally.

What Do I Need to Do?

To complete this update:

Once the certificate renewal has completed your old certificates will no longer work. You must update to these new certificates as soon as the renewal has completed.

1. Download the certificate that corresponds to your environment by clicking on the link in the following table:

   Environment	Environment URLs	Date of Renewal	Notes
   Europe Production	apps.esignlive.eu	February 15, 2025, at 4:00 PM (ET)	Current certificate expires February 22, 2026

2. Install the new certificate on or after the Date of Renewal listed in the table above.

For more information about configuring certificates, see Getting Started with SDKs.

If you have any questions or concerns, please contact our Support Team. We encourage you to visit the OneSpan Sign Trust Center for regular updates on this matter.

Australian

The *esignlive.com.au Certificate* expired on February 23, 2025.

As such, we renewed this certificate for the following environments on the following dates:

• AU Production: February 15, 2025, at 9:00 AM (ET)

There is no downtime during a Certificate renewal.

How Does This Impact Me?

If you are not an integrated customer and do not trust any of our certificates, there is no action required on your part.

If you have trusted our certificates as recommended, the certificate will be automatically renewed. There is no action required on your part.

If you have trusted our leaf/end-entity or intermediate certificate, you must complete the update by performing the procedure in the next section — What Do I Need to Do? This will ensure that your OneSpan Sign service continues to function normally.

What Do I Need to Do?

To complete this update:

Once the certificate renewal has completed your old certificates will no longer work. You must update to these new certificates as soon as the renewal has completed.

1. Download the certificate that corresponds to your environment by clicking on the link in the following table:

   Environment	Environment URLs	Date of Renewal	Notes
   Australian Production	apps.esignlive.com.au	February 15, 2025, at 9:00 AM (ET)	Current certificate expires February 22, 2026

2. Install the new certificate on or after the Date of Renewal listed in the table above.

For more information about configuring certificates, see Getting Started with SDKs.

If you have any questions or concerns, please contact our Support Team. We encourage you to visit the OneSpan Sign Trust Center for regular updates on this matter.