GeoTrust DV and RapidSSL DV ICA Rollover
On May 24, 2022, between 9:00 am and 11:00 am MDT (3:00 pm and 5:00 pm UTC), DigiCert will replace the intermediate GeoTrust® DV and RapidSSL® DV mixed SHA-256 chains' ICAs.
These intermediate CA certificates below chain to the DigiCert Global Root CA certificate. See the DigiCert Trusted Root Authority Certificates page at DigiCert Root Certificates - Download & Test | DigiCert.com to download copies of the new Intermediate CA certificates.
| Current ICA certificates | New ICA certificates |
|---|---|
| GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1 |
GeoTrust Global TLS RSA4096 SHA256 2022 CA1 |
| GeoTrust TLS DV RSA Mixed SHA256 2021 CA-1 |
|
| RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 |
RapidSSL Global TLS RSA4096 SHA256 2022 CA1 |
| RapidSSL TLS DV RSA Mixed SHA256 2021 CA-1 |
No action is required unless your customers do any of the following:
- Pin the old versions of the GeoTrust DV and RapidSSL DV intermediate CA certificates
- Hard code the acceptance of the old versions of the GeoTrust DV and RapidSSL DV intermediate CA certificates
- Operate a trust store that includes the old versions of the GeoTrust DV and RapidSSL DV intermediate CA certificates
Action required
If your customers practice pinning, hard code acceptance, or operate a trust store, update your environment as soon as possible. They should stop pinning and hard coding ICA certificate trust or make the necessary changes to ensure their GeoTrust DV and RapidSSL DV certificates issued from the new ICA certificates are trusted. Please make sure they can chain up to their new ICA certificate and trusted root). Please also refer to the DigiCert ICA Update knowledge base article: DigiCert ICA Update.
Further reference can be found in our Wiki.
Further reference can be found in our Wiki." can you please change to "For more information, please visit our wiki or if you have any question feel free to reach out to our Support team at [email protected].