The TLS certificate for "cdn01.quay.io" is set to be renewed on November 17, 2025

The TLS certificate for cdn01.quay.io is set to be renewed on November 17, 2025, and the trust chain is changing to use a different root CA. This should not cause any issue for commonly configured client's as DigiCert root certificates are widely trusted amongst clients.

If you have a client in a non-standard configuration (e.g. pinning the current root certificate, or it’s running on a very old operating system) you will need to ensure it’s updated to trust the DigiCert Global Root G2/G3 CAs before November 17, 2025 to avoid disruption.

For any further queries, feel free to contact Red Hat Technical support.