New Root Certificate Hierarchy for Basic SSL Certificates

What’s changing?

TRUSTZONE Basic SSL and Basic SSL Wildcard certificates (also known as Alpha SSL) will migrate to a new CA certificate chain. That is the GlobalSign R6 chain:

–          Basic SSL: Intermediate CA – RSA – GlobalSign R6

–          Basic SSL: Root CA – RSA – GlobalSign R6 (from 29/01/2024)

NOTE: This change has no impact on our similarly named Basic UC SSL certificates

When?

From the 29^th of January 2024.

Are existing certificates affected?

No. Certificates issued prior to 29/01/2024 will not be impacted by the change and will continue to function until their expiration date. There is no need to re-issue them So, there is no need to re-issue and re-install to ensure functionality.

What do I need to do?

Any certificates issued from 29/01/2024 will use the new CA certificate chain. This includes re-issued versions of certificates originally issued from the old chain. When installing these certificates, you will need to install the new intermediate certificate as well. The new root certificate is already present in the various root stores.

Why is the change happening?

The change is a necessary response to changes to Mozilla’s Root Store Policy. This policy will gradually become stricter with regards to the allowed validity period for root certificates. Scheduled to end at a maximum of 15 years allowed root certificate validity for TLS purposes by 2029.

Questions?

If you have any questions that are not answered above, don’t hesitate to contact us at support@trustzone.com or give us a call on +45 88 33 10 00 and we will do our best to answer them.