Intermediate and root certificates (CA bundle)
In the email about the certificate’s issuance we also send you the appropriate CA certificates that are required for the installation. We recommend you to proceed using this source. However, if you find it hard to identify the individual certificates in the sent files, the following list will help you.
In the tables below we have prepared an overview of the intermediate and root certificates of our CA in case you need to download the certificates separately.
Default CA certificates
The default root certificate for the DV and OV certificates is the DigiCert Global Root CA and for the EV certificates the DigiCert High Assurance EV Root CA. The intermediate certificates can differ depending on the type of validation and the particular CAs, therefore always use the intermediate certificate you’ll receive from us together with the server certificate. For the S/MIME certificates the root certificate DigiCert Assured ID Root CA is used.
Overview of the used intermediate certificates
|DigiCert TLS RSA SHA256 2020 CA1||DigiCert Global Root CA||0a:35:08:d5:5c:29:2b:01:7d:f8:ad:65:c0:0f:f7:e4||23 Sep 2030|
|RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1||DigiCert Global Root CA||07:98:36:03:AD:E3:99:08:21:9C:A0:0C:27:BC:8A:6C||13 May 2023|
|GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1||DigiCert Global Root CA||0C:08:96:65:35:B9:42:A9:73:52:65:E4:F9:75:40:BC||31 May 2022|
|DigiCert TLS Hybrid ECC SHA384 2020 CA1||DigiCert Global Root CA||0a:27:5f:e7:04:d6:ee:cb:23:d5:cd:5b:4b:1a:4e:04||22 Sep 2030|
|DigiCert SHA2 Assured ID CA||DigiCert Assured ID Root CA||04AE79606666901AB9C57FA66C5BDCCD||05 Nov 2028|
|DigiCert SHA2 Assured ID Code Signing CA||DigiCert Assured ID Root CA||0409181B5FD5BB66755343B56F955008||22 Oct 2028|
|DigiCert SHA2 Extended Validation Server CA||DigiCert High Assurance EV Root CA||0C79A944B08C11952092615FE26B1D83||22 Oct 2028|
|DigiCert SHA2 High Assurance Code Signing CA||DigiCert High Assurance EV Root CA||0B7E10903C38490FFA2F679A87A1A7B9||22 Oct 2028|
|GeoTrust ECC CA 2018||DigiCert Global Root CA||0F1C20273B1E33422D6733811789DD5A||06 Nov 2027|
|GeoTrust EV ECC CA 2018||DigiCert High Assurance EV Root CA||09236478FA284E6625F91A06DBA21055||06 Nov 2027|
|GeoTrust EV RSA CA 2018||DigiCert High Assurance EV Root CA||03FEEF1BB5B648349A20950F8BC69753||06 Nov 2027|
|Thawte ECC CA 2018||DigiCert Global Root CA||0F67F8F2C89C6BF55A19EF6BE42C33D7||06 Nov 2027|
|Thawte EV ECC CA 2018||DigiCert High Assurance EV Root CA||0327E854E116CE01907C0FBF2DF1F8CC||06 Nov 2027|
|Thawte EV RSA CA 2018||DigiCert High Assurance EV Root CA||06968F964AE82356C74E17C2B5365B00||06 Nov 2027|
|Thawte RSA CA 2018||DigiCert Global Root CA||025A8AEF196F7E0D6C2104B21AE6702B||06 Nov 2027|
|DigiCert Assured ID CA-1||DigiCert Assured ID Root CA||06FDF9039603ADEA000AEB3F27BBBA1B||10 Nov 2021|
Root certificates from DigiCert to download
The root certificates from the CA DigiCert (and intermediates too) are listed on the website DigiCert Trusted Root Authority Certificates. Here you can test the functionality of the given root certificate and check if it is trustworthy for the device intended. You may find this function useful particularly for testing old devices and smartphones.
Looking for CA Bundle?
During the installation, the server may ask you for a so-called CA certificate bundle. This term stands for the intermediate certificate and the CA root certificate in one file one after another. Use the bundle only when necessary. The root certificates are not required for the installation in most cases. Just set the appropriate intermediate certificate on the server.
Terminated intermediate certificates
Intermediate certificates that are not used anymore are listed in this article on the DigiCert web: DigiCert ICA Update.