VeriSign Trust Network Trusted Server CAs Expiring

[ChazMan]

VeriSign (now Symantec) issues about one-third of all trusted CA's. That being said, we have four CA's named "VeriSign Turst Network-X" that are about to expire. I also have "VeriSign Class X Public Certification Authority-Gx" as well as a "VeriSign Universal Root Certification Authority" that don't expire until 2036-2038.

Since VeriSign is no more, is it safe to go ahead and delete these off our VPN?

We are on 8.3R4, PSA5000 hardware.

[zanyterp]

That is your call
You can remove them (the ones that expire this month; probably not the ones that expire in 2036-2038) and monitor for helpdesk calls. If you are on recent 8.2 or 8.3 versions, you can restore them using the "restore default" option on the trusted server CA