Please see the DocuSign Trust Center page at https://www.docusign.com/trust/compliance/public-certificates under the “Site Certificates” section to download and for further details on the new NA4 certificate availability and application dates.

The new NA4 certificate will be enforced on Wednesday, November 17, 2021, 3PM. After this time, the new certificate will be the sole certificate for the NA4 Site SSL endpoints.

DocuSign is deprecating support for outbound TLS 1.0 on 31st October 2021. Although DocuSign has not supported TLS 1.0 in our products since 2018, we did allow opportunistic TLS which means if a recipient's email server did not accept a higher version of TLS, they could receive emails via TLS 1.0. This will end on October 31st.

Additional information can be found on the DocuSign Support Center.

Please contact Technical Support if you have any questions.

The CLM Operations team will be performing essential system maintenance on all CLM Data Centers starting Friday, October 8th and ending Saturday, October 9th 2021. During this time, there may be some periods where the CLM application is degraded.  We apologize for the short notice for this announcement and any impact this may have on your accounts.

Please reach out to DocuSign CLM Technical Support for any questions or concerns and see below for the timing by environment:

EU11 EU21 PRODUCTION ENVIRONMENTS

Between 18:30 UTC (1:30 pm CDT) and 22:30 UTC (5:30 pm CDT) on Friday October 8th 2021.

UAT ENVIRONMENTS

Between 00:30 UTC (7:30 pm CDT) and 03:30 UTC (10:30 pm CDT) on Friday October 8th 2021-Sat October 9th 2021.

NA11 NA21 PRODUCTION ENVIRONMENTS

Between 18:00 UTC (1:00 pm CDT) and 0:00 UTC (7:00 pm CDT) on Sat October 9th 2021.

US11 US12 PRODUCTION ENVIRONMENTS

Between 18:00 UTC (1:00 pm CDT) and 0:00 UTC (7:00 pm CDT) on Sat October 9th 2021.

DocuSign has observed a new phishing campaign in which malicious URLs are being hidden in legitimate DocuSign envelopes.

The emails are being sent from a variety of senders and associated email addresses, many with the domains email[.]com or co[.]za. The emails reported have many closely related subject lines, including:

• “Important: AOL Email Deactivation Notice,”
• “Important: Microsoft Email Maintenance Request” 
• “Bank Confirmation”
• "INVOICE.pdf"
• "PAYMENTS.pdf"
• "STATEMENTS.pdf"
• "PAYMENT DUE.pdf"
• "TAX INVOICE.pdf"

Do not click on any email or attachment links from unknown or untrusted senders. All customers are reminded that they should continue their own due diligence and identify and report to DocuSign suspicious emails using legitimate DocuSign accounts and technology (securityaccountabuse@docusign.com), as well as suspicious emails spoofing the DocuSign brand (spam@docusign.com). Customers should also continue to utilize their own organization’s security tools to investigate potentially malicious documents, links and notifications.

For more information on how to spot phishing, please see our Combating Phishing and Protecting Your Organization Against DocuSign Brand Impersonation white papers.