DigiCert update
In the latter half of 2023, Cloudflare will begin deprecating DigiCert as a certificate authority available for a variety of certificates:
This migration only affects Universal, Advanced and Cloudflare for SaaS certificates where the certificate has been provisioned by Cloudflare using DigiCert as certificate authority.
Also, this change will not impact existing certificates issued from DigiCert that Cloudflare is currently serving, but it will impact new certificate orders and renewals.
Consider each specific migration guide for actions you might have to take and refer to CAs and certificates FAQ for commonly asked questions about the Cloudflare offerings and CAs that are used.
As of December 14, 2024, signed exchanges (SXG) will no longer be supported for punycode domains ↗. This is due to a limitation of Google Trust Services, which will be the only certificate authority (CA) used for SXG.
| SSL/TLS offering | What will happen | When |
|---|---|---|
| Advanced certificate | New Cloudflare accounts will not have DigiCert as an option for advanced certificates. | August 31, 2023 |
| Advanced certificate | Cloudflare will stop using DigiCert as a CA for new advanced certificate orders. | October 5, 2023 |
| Advanced certificate | Cloudflare will gradually stop using DigiCert as the CA for advanced certificate renewals. | October 26, 2023 |
| SSL for SaaS | New Cloudflare accounts will not have DigiCert as an option for SSL for SaaS certificates. | September 7, 2023 |
| SSL for SaaS | Cloudflare will stop using DigiCert as a CA for new SSL for SaaS certificate orders. | October 18, 2023 |
| SSL for SaaS | Cloudflare will gradually stop using DigiCert as a CA for SSL for SaaS certificate renewals. | November 1, 2023 |