Summary of change
We will be moving away from Microsoft’s Front Door Content Delivery Network “CDN” for TextMarketer, replacing instead with Cloudflare’s CDN instead.
Currently in other words, most TextMarketer website content is delivered via FrontDoor, but after this change is completed, it will be Cloudflare that delivers TextMarketer website traffic instead.
What is changing?
Two things;
1. The public IP addresses that TextMarketer will sit behind (content coming from) will change
2. The SSL certificates being presented by TextMarketer web servers will also change
When is it happening?
04/02/2025 at 05:00
Do I need to take action?
We expect most users not to be affected by this change after it is complete, with no action required if that is the case.
However, if you have one or both of the following two restrictions on your network; you will need to prepare for this change on your side. Please consider the following;
1. In case of restricted outbound internet: If you have outbound internet network restrictions (outbound IP allows/blocks) in place that currently “allow only Microsoft FrontDoor CDN IPs” for TextMarketer, you will need to update these to “allow only Cloudflare CDN IPs” instead (both FrontDoor and Cloudflare during the maintenance, but FrontDoor IPs can be later removed).
2. In case of “certificate pinning” to trust only the specific, known SSL/HTTPS certificates currently presented by the platform web servers. As the front-end SSL certificates for TextMarketer will also be changing, this could cause a problem for those “certificate pinning”.
Technical details on the two changes for those affected
1. Changing TextMarketer IP addresses;
Pre-change:
Users / clients of TextMarketer will be hitting Microsoft’s “AzureFrontDoor.Frontend” IP addresses. These vary periodically (will not stay the same over time) at Microsoft’s discretion, are published and updated by Microsoft here:
“Azure IP Ranges and Service Tags – Public Cloud”
https://www.microsoft.com/en-us/download/details.aspx?id=56519
Search for and see the AzureFrontDoor.Frontend block in the downloaded file on that page. This is where most TextMarketer traffic currently goes to.
After the change:
Users / clients of TextMarketer will be hitting Cloudflare’s “IP Ranges” IP addresses instead.
Cloudflare can also vary this list over time, but do so less often than Microsoft. They can be found on this page published by Cloudflare here:
https://www.cloudflare.com/en-gb/ips/
This page also suggests other ways of getting Cloudflare IPs if you wish to do so.
Required action
Please allow outbound traffic to TextMarketer on your network allowing Cloudflare’s IPs as detailed above.
2. Changing TextMarketer SSL certificates…
Pre-change:
For reference, the two TextMarketer certificates currently in use are:
Common Name (CN) – *.textmarketer.co.uk
subjectAltName (SAN) – *.textmarketer.co.uk textmarketer.co.uk
Fingerprint SHA1 – 288D8414B8AF19A736DAD6CB22A558B7AE17A3A9
Issuer – Starfield Secure Certificate Authority – G2 (Starfield Technologies, Inc. from US)
Common Name (CN) – *.textmarketer.biz
subjectAltName (SAN) – *.textmarketer.biz textmarketer.biz
Fingerprints SHA1 – D57F62B9297B4161EF045FCEE268189A0057C6EF
Issuer – Starfield Secure Certificate Authority – G2 (Starfield Technologies, Inc. from US)
After the change:
The following certificates are for illustrative purposes only. They may have expired and automatically replaced by others before the day of the change.
PLEASE NOTE: These are managed by Cloudflare so will be replaced periodically and automatically by them. Note also that Cloudflare sometimes issues two certificates at a time for redundancy.
Common Name (CN) – textmarketer.co.uk
subjectAltName (SAN) – textmarketer.co.uk *.textmarketer.co.uk
Fingerprints SHA1 – 0C79EBDBF4535FA347906BA259E59DC66A304934
Issuer – WE1 (Google Trust Services from US)
Expires – 2025-11-29 04:08
Common Name (CN) – textmarketer.biz
subjectAltName (SAN) – textmarketer.biz *.textmarketer.biz
Fingerprints SHA1 – 4694B756CB7DBC2D35EA41D4923AAC765C3CF1E5
Issuer – WR1 (Google Trust Services from US)
Expires – 2025-12-04 19:23
Recommended action
Avoid certificate pinning textmarketer certificates.