What is DigiCert?
DigiCert is a leading digital trust and Certificate Authority provider that offers SSL/TLS, Code Signing, S/MIME, Mark Certificates, Document Signing, PKI, and certificate lifecycle management solutions.
What Are the Recent Changes and Updates in 2026 for DigiCert Digital Certificates?
DigiCert introduced several major certificate lifecycle and validation updates in 2026:
- Effective June 1, 2026, DigiCert will log all newly issued public TLS certificates—including reissues and duplicates—to Certificate Transparency (CT) logs with no opt-out.
- Since March 3, 2026, DigiCert strictly validates Domain Name System Security Extensions (DNSSEC) if present during domain control and CAA checks.
- Google Chrome and Mozilla Firefox completely removed DigiCert's G1 root certificates from their default trust stores on April 15, 2026.
- DigiCert is enforcing Certificate Transparency (CT) logging for all public trusted TLS/SSL certificates as of June 1, 2026
- On May 15, 2026, DigiCert indefinitely retired specific G2 and G3 intermediate CA certificates to isolate their certificate types into dedicated, single-purpose TLS hierarchies.
- Organizations validated for public OV TLS certificates on or after February 24, 2026, are now valid for re-use up to only 397 days
- Since February 24, 2026, DigiCert caps all new public Domain Validated (DV), Organization Validated (OV), and Extended Validation (EV) TLS/SSL certificates at a maximum validity of 199 days.
- The period during which domain validation data can be reused has been slashed from 398 days down to a maximum of 199/200 days.
- Effective February 24, 2026, Maximum validity of code signing reduced to 459 days. 2 year and 3-year public Code Signing issuance discontinued.
What is a DigiCert Root Certificate?
A DigiCert root certificate is a trusted top level Certificate Authority (CA) certificate used to establish trust for SSL/TLS, Code Signing, S/MIME, and other digital certificates issued by DigiCert. Browsers and operating systems use these roots to verify certificate chains.
What are the main DigiCert G5 roots?
Common DigiCert G5 roots include:
- DigiCert TLS RSA4096 Root G5
- DigiCert TLS ECC P384 Root G5
These roots are designed for long term trust and remain valid until 2046.
What is a DigiCert Cross signed Root Certificate?
A cross signed root is a DigiCert root certificate signed by an older trusted root to improve compatibility while newer roots gain broader trust store adoption.
Is DigiCert a Trusted Certificate Authority?
Yes. DigiCert is trusted by major browsers, operating systems, enterprises, and organizations worldwide and is widely used for business and enterprise security.
What is DigiCert Secure Site SSL?
DigiCert Secure Site SSL is a premium SSL solution designed for business-critical websites and includes enhanced validation, priority support, and additional security features.
Does DigiCert support SSL Automation?
Yes. DigiCert supports certificate automation through ACME and certificate lifecycle management tools like DigiCert ONE, Trust Manager to simplify issuance and renewal.
What is DigiCert ONE?
DigiCert ONE is DigiCert’s certificate lifecycle and PKI management platform that helps organizations automate certificate discovery, deployment, monitoring, and renewal.
Does DigiCert support Post Quantum Cryptography?
Yes. DigiCert actively develops crypto agility and post quantum cryptography solutions to help organizations prepare for future security requirements.
Why do businesses choose DigiCert?
Businesses choose DigiCert for strong browser trust, enterprise security solutions, automation capabilities, global support, and advanced certificate management tools.