Digicert being used for phishing attacks?

Lately we've been getting a ton of phishing emails pretending to be from Microsoft 365, alerting users that their passwords are expiring, with a link to "Stay with the current password".

The hyperlink is in the format

> https://updates.digicert.com/LP=2310?om_ext_cid=dc_email__8701&mth=September%2C%202022%23{ Email recipient address }&RURL=http://fphg.20.jonnappa.com%3A%2F%2F%23{ Base64 encoded link to AWS site }

Anyone else seeing this? I'd report it to Digicert, but I have no idea who I'd contact.