[October 28, 2024] Notice on Switching the DigiCert Root Certificate
Dear customers,
According to the latest root certificate trust policy of Mozilla, the trusted root certificates of all CAs around the world must be updated at least once every 15 years, and Mozilla will no longer trust the trusted root certificates that fail to be updated within the specified time. From December 1, 2024, DigiCert, GeoTrust, and RapidSSL certificates will be issued using new root and intermediate certificates.
Switchover Impact
- Certificates issued before December 1, 2024 can be used properly.
- From December 1, 2024, DigiCert, GeoTrust, and RapidSSL certificates will be issued using new root and intermediate certificates.
- SSL certificates issued after December 1, 2024 are not affected if they are used for PC or applet services. The new DigiCert Global Root G2 root certificate has been embedded in mainstream OSs, mobile devices, and JDK environments, and it will not cause client version incompatibility.
- If the SSL certificates issued after December 1, 2024 are used for non-PC browsers such as app services and IoT devices, the root certificates preset on devices will be affected. You can download the latest root and intermediate certificates to replace the original ones, or use the built-in truststore of the system for verification.
- DigiCert Global Root G2 uses SHA-256. This improves the security.
If you have any questions during this period, please feel free to contact us.
Thank you for using Huawei Cloud.
List of Affected Root Certificates
|
Original Root Certificate |
Invalidated by Mozilla On |
Affected Scope |
New Root Certificate |
|---|---|---|---|
|
Baltimore CyberTrust Root |
April 15, 2025 (The root certificate expires on May 15, 2025.) |
Cross-certificates for more compatibility |
DigiCert Global Root G2 |
|
DigiCert Global Root CA |
April 15, 2026 |
DV and OV SSL certificates issued by DigiCert |
DigiCert Global Root G2 |
|
DigiCert High Assurance EV Root CA |
April 15, 2026 |
EV SSL certificates issued by DigiCert |
DigiCert Global Root G2 |
|
DigiCert Global Root G2 |
April 15, 2029 |
New DigiCert SSL certificates will be issued on March 8, 2023. |
- |
Changes of DV, OV, and EV Certificate Chains
|
Certificate Type |
Original Intermediate Certificate |
Original Root Certificate |
New Intermediate Certificate |
New Root Certificate |
|---|---|---|---|---|
|
Digicert OV |
Secure Site CA G2 |
DigiCert Global Root CA |
DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1 |
DigiCert Global Root G2 |
|
Digicert EV |
Secure Site Extended Validation CA G2 |
DigiCert High Assurance EV Root CA |
DigiCert Secure Site EV G2 TLS CN RSA4096 SHA256 2022 CA1 |
DigiCert Global Root G2 |
|
Digicert OV Pro |
Secure Site Pro CA G2 |
DigiCert Global Root CA |
DigiCert Secure Site Pro G2 TLS CN RSA4096 SHA256 2022 CA1 |
DigiCert Global Root G2 |
|
Digicert EV Pro |
Secure Site Pro Extended Validation CA G2 |
DigiCert High Assurance EV Root CA |
DigiCert Secure Site Pro EV G2 TLS CN RSA4096 SHA256 2022 CA1 |
DigiCert Global Root G2 |
|
Geotrust OV |
GeoTrust CN RSA CA G1 |
DigiCert Global Root CA |
GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 |
DigiCert Global Root G2 |
|
Geotrust EV |
GeoTrust EV CN RSA G1 |
DigiCert High Assurance EV Root CA |
GeoTrust EV G2 TLS CN RSA4096 SHA256 2022 CA1 |
DigiCert Global Root G2 |
|
Geotrust DV |
GeoTrust CN RSA CA G1 |
DigiCert Global Root CA |
GeoTrust TLS RSA CA G1 |
DigiCert Global Root G2 |
|
Geotrust DV Basic (Rapid SSL) |
RapidSSL Global TLS RSA4096 SHA256 2022 CA1 |
DigiCert Global Root CA |
RapidSSL TLS RSA CA G1 |
DigiCert Global Root G2 |
|
Digicert DV Basic |
Encryption Everywhere DV TLS CA - G2 |
DigiCert Global Root G2 |
Encryption Everywhere DV TLS CA - G2 |
DigiCert Global Root G2 |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot
