Nebula (VPN) certificates expire every year and must be renewed. The current renewal has reached the stage where you must confirm that the new issuer
(CA)
certificate has been installed on your machine. A valid CA certificate is required for your validator to stay connected to the network.
Please perform the check below as soon as possible.
HOW TO CHECK ON VALIDATOR DASHBOARD
1. Sign in to your Validator Dashboard as usual.
2. In the top navigation bar, click Settings. (If you’re on a small screen, open the menu and choose Settings.)
3. On the “Admin settings” page, find the row titled “Nebula certificates”
(“View the Nebula CA and host certificates of this node.”) and click the “View certificates” button on its right.
4. A “Nebula certificates” window opens. Make sure the “Valid” tab is selected
(this is the default).
5. Under the “CA certificate” heading, confirm that a certificate named
“Mosaic Chain Mainnet” is listed, marked with a green “Current”
badge, and
that its Expiry date is 2027-08-28.
If you can see this certificate, no further action is needed for now.
Note: The “Host certificate” does not need to show a renewed certificate yet.
It will need to be verified next weekend using a similar procedure — a separate announcement will follow.
IF THE NEW CA CERTIFICATE IS MISSING
If the certificate named “Mosaic Chain Mainnet” with the “Current” badge and
2027-08-28 expiry is not shown, contact support immediately and include:
– your mosaic-debug output, and
– a screenshot of the certificate window.
DEADLINE: If this is not resolved by 25 September, your validator machine will become unreachable on the network and in the explorer.
ALTERNATIVE: CHECK DIRECTLY ON THE MACHINE
If you cannot reach the Dashboard, you can inspect the certificate directly on the machine:
sudo nebula-cert print -path /etc/nebula/ca.crt