Ask a Question

Advanced Search

Alert ID : AL270918215149

Last Modified : 10/09/2018

Extended Validation (EV) TLS certificate profile update

Description

Extended Validation (EV) TLS certificate profile update

We updated the certificate profile of the full SHA256 EV hierarchy*1 to remove the Symantec policy OID from Certificate Policies extension on September 27, 2018 so that Chrome*2 on macOS shows the EV indicator.

Certificate Extension

Full SHA256 EV certificates issued prior to September 27, 2018

Full SHA256 EV certificates issued after September 27, 2018

Certificate Policies

2.16.840.1.114412.2.1 (DigiCert OID)

2.16.840.1.113733.1.7.23.6 (Symantec OID)

2.23.140.1.1 (CAB/F OID)

2.16.840.1.114412.2.1 (DigiCert OID)

2.23.140.1.1 (CAB/F OID)

*1 Knowledge Base for the details of the full SHA256 EV hierarchy

https://knowledge.digicert.com/content/dam/digicertknowledgebase/library/SYMWISE/TRUST_SERVICES/Tech_Support/INFO4608/Image2.png

*2 Chrome bug with multiple policy OIDs https://bugs.chromium.org/p/chromium/issues/detail?id=867944


Please replace the existing full SHA256 EV certificates with SHA256 EV under SHA1 root if you want to show the EV indicator in Chrome on macOS. There is no action required for the rest of the use cases.
 

Thawte Certificate Center (TCC) Replacement Instructions
Thawte Certificate Center Enterprise (TCCE) Replacement Instructions
Reseller End User Portal Replacement Instructions