Revocation of certain ICAs and Root (April–May 2026)
In April and May 2026, selected root and intermediate certificates will be distrusted in the Mozilla and Chrome Root programs. You do not need to worry about the changes; they will not have an impact.
By April 15, 2026, Mozilla will end trust for older G1 root certificates due to their multipurpose usage. A separation of certification hierarchies according to purpose (e.g., TLS vs. document signing) is being newly promoted.
By May 15, 2026, DigiCert will revoke several intermediate (ICA) certificates across G2 and G3 generations. The revocation does not affect already issued certificates but requires their gradual replacement with new chains.
These changes are part of a long-term trend of tightening WebPKI rules and have no impact on regular users or customers using current certification authorities. More information on our Blog.
