Tencent Cloud Notices > Notice Details
[EdgeOne]Notification Regarding Changes to Root Certificates Originating from TrustAsia
2026-01-21 16:48:41
The free certificates currently available in the EdgeOne console—excluding wildcard certificates—are issued primarily by TrustAsia. According to TrustAsia's notification, starting from January 27, 2026, TrustAsia will officially launch a dedicated root certificate to issue new certificates. Details are as follows:
Impact
This update is a grayscale switching. If your current domain name is using the EdgeOne free certificate, there will be no impact on existing issued certificates. New certificates will gradually switch to issuance by the new dedicated root certificate. Please note and assess the business impact after this root certificate update, as compatibility may vary in some earlier versions of the operating system.
If the free certificate cannot meet your utilization need after the update, you can also Upgrade to a Tencent Cloud paid SSL certificate , then refer to Deploy/Update a Managed SSL Certificate to Edge to complete the certificate replacement. The paid certificate will be issued by an Authoritative CA with higher compatibility and is valid for one year, providing more stable HTTPS service for your website.
The Top-most root certificate transition details
Detailed root certificate change information and certificate compatibility impact as follows:
1. Top-level root certificate update
| Original root certificate | New root certificate |
|---|---|
| DigiCert Global Root G2 | TrustAsia TLS ECC Root CA |
| DigiCert Global Root G3 | TrustAsia TLS RSA Root CA |
| DigiCert Global Root CA (intersect old root certificat) | Certum Trusted Network CA |
| Certificate chain before modification | Certificate chain after modification | ||
|---|---|---|---|
| Root certificate | DigiCert Global Root G2 | TrustAsia TLS RSA Root CA | |
| Intersect root certificate | DigiCert Global Root CA | Certum Trusted Network CA | |
| Certificate Chain Example |  |
 |
|
| Validity period of the root certificate | August 1, 2013 - January 15, 2038 | May 15, 2024 - May 15, 2044 | |
| Validity period of the intersect root certificate | November 10, 2006 - November 10, 2031 | October 22, 2008 - December 31, 2029 | |
| compatibility | Apple | iOS 4.0+ / Mac OS X 10.6+ | iOS 3.x+ / MacOS X 10.5.8+ |
| Mozilla | Firefox 2+ NSS 3.11.8 | Firefox 6+ NSS 3.12.10 | |
| Microsoft | Windows XP SP3+ | Windows XP SP3+ | |
| Android 1.1+ | Android 4.0+ | ||
| Oracle | Java JRE 1.4.2_17+ | Java JRE 1.4.2_20+ | |
