[Change] Announcement on Discontinuing SHA1 Root Certificate Issuance
Dear Customer,
Due to security vulnerabilities in root certificates using the SHA1 signature algorithm, Mozilla will remove trust in root certificates including DigiCert Assured ID Root CA, DigiCert Global Root CA, and DigiCert High Assurance EV Root CA on April 15, 2026. To further strengthen digital certificate security standards, starting from April 15, 2025, we will no longer issue DigiCert certificates under SHA1 roots by default.
We recommend that customers currently using the above root certificates reissue or replace them with the latest DigiCert G2 root certificates before the trust removal takes effect. If you have upcoming renewal or new purchase needs, we recommend prioritizing DigiCert G2 root certificates. If you have any questions about encryption algorithm standards or operation procedures, you can log in to the official website to refer to the documentation or contact the technical support team. Thank you for your understanding and support!