Revocation of Certain ICA and Root (April–May 2026)
In April and May 2026, selected root and intermediate certificates will have their trust removed within the Mozilla and Chrome Root programs. You should not worry about the changes, they will have no impact.
As of April 15, 2026, Mozilla will discontinue trust in older G1 root certificates due to their multi-purpose use. The separation of certification hierarchies by purpose (e.g., TLS vs. document signing) is being newly enforced.
As of May 15, 2026, DigiCert will revoke several intermediate (ICA) certificates across the G2 and G3 generations. The revocation does not affect already issued certificates but requires their gradual replacement with new chains.
These changes are part of a long-term trend towards stricter WebPKI rules and have no impact on ordinary users or customers using current certification authorities. More information on our Blog.
