# Expired certificate on ucarecdn.com

- Provider: [Uploadcare](https://down.guide/uploadcare)
- Level: confirmed
- Impact: Major outage
- lasted 3h 35m
- started 2019-07-19 15:59 UTC
- CDN
- us
- id: DWN-7d214e8496
- Official page: http://stspg.io/83c90dd88

## Updates from Uploadcare
### 2019-07-19 15:59 UTC: identified
The issue has been identified and a fix is being implemented.

### 2019-07-19 17:50 UTC: identified
We are continuing to work on a fix for this issue.

### 2019-07-19 18:03 UTC: monitoring
A fix has been implemented and we are monitoring the results.

### 2019-07-19 19:35 UTC: resolved
This incident has been resolved.

### 2019-08-01 14:10 UTC: postmortem
# What happened
On 19th July 2019 at 15:30 UTC certificate used to serve traffic from \[ucarecdn.com\](http://ucarecdn.com) and \[www.ucarecdn.com\](http://www.ucarecdn.com) has expired. All HTTPS traffic to these domains effectively stopped.
We were able to quickly \\(within minutes\\) redirect \[www.ucarecdn.com\](http://www.ucarecdn.com) traffic to alternative CDN provider with proper certificate installed.
It took us approximately 105 minutes since start of the incident to fix the issue with \[ucarecdn.com\](http://ucarecdn.com).
!\[\](https://ucarecdn.com/d07b72c7-36e0-4328-b5b9-902108fff1e9/-/preview/400x300/traffic)
# Why that happened
1. Our CDN partner's certificate management system failed to renew the certificate in question and needed an input from our team.
2. It did sent an email 5 days prior to expiration requesting manual input.
3. This email wasn't noticed, because it was sent to a team member that was off the grid on vacation.
# What we should do to improve
‌
1. Change notification system settings, so any issues with certificates with our CDN partners are sent to a team, not a person \\\[done\\\]
2. Use 3rd party service to monitor certificate expiration and other settings \\\[done\\\]
3. Use CDN partner's APIs to actively and automatically monitor certificates \\\[in progress\\\]
4. Create an service that could be used to quickly redirect \[ucarecdn.com\](http://ucarecdn.com) traffic to backup CDNs in case of any issues with the main one \\(not only due to certificates\\)

---
down.guide reads providers' official status pages every minute and adds its own evidence, always labeled. Free, no account. Agents: MCP at https://down.guide/mcp, REST at https://down.guide/api/v1, feeds at https://down.guide/feed. Built by Sazabi (https://sazabi.com/?utm_source=down-guide&utm_medium=markdown).