Hi all,
Cloudflare will be deprecating DigiCert as a Certificate Authority for all SSL certificate products (Universal SSL, Advanced certificates, and SSL for SaaS).
The change will occur on the following schedule:
| Change | Date |
|---|---|
| New Cloudflare accounts will not have the ability to choose DigiCert as a CA for Advanced certificate orders | August 30th, 2023 |
| New Cloudflare accounts will not have the ability to choose DigiCert as a CA for custom hostname (SSL for SaaS) certificate orders | September 6th, 2023 |
| Customers will no longer be able to choose DigiCert as the issuing CA for new Advanced certificates orders on existing accounts | October 4th, 2023 |
| Expiring DigiCert certificates will no longer use DigiCert as the issuing CA for Advanced certificate renewals | October 11th, 2023 |
| Customers will no longer be able to choose DigiCert as the issuing CA for custom hostname (SSL for SaaS) certificates | October 18th, 2023 |
| Certificate renewals will no longer use DigiCert as the issuing CA for custom hostname (SSL for SaaS) certificates | October 25th, 2023 |
After the DigiCert deprecation, certificates will begin using Let’s Encrypt or Google Trust Services as the issuing CA. If you have a CA preference, we recommend that you take action before the deprecation dates to indicate your CA of choice.
Resources:
-
DigiCert Deprecation Developer Docs - DigiCert update · Cloudflare SSL/TLS docs
-
DigiCert update for Advanced certificates - Advanced certificates - DigiCert migration guide · Cloudflare SSL/TLS docs
-
DigiCert update for SSL for SaaS certificates - SSL for SaaS certificates - DigiCert migration guide · Cloudflare SSL/TLS docs
-
CAs and Certificates FAQ - CAs and edge certificates FAQ · Cloudflare SSL/TLS docs