How to Select Intermediate and Root Certificates for DigiCert SSL
You may select different intermediate and root certificates (ICAs) when generating your DigiCert SSL certificate on TheSSLStore.com.
The majority of users should keep the default Intermediate option.
If you need to select a specific intermediate and root certificate for your DigiCert SSL, please use these tables as a reference to pick the correct chain on your SSL generation form.
(Note: the certificate menu may only show the name of the intermediate certificate – the tables indicate which root will be provided for each intermediate selection).
DigiCert EV SSL ICAs
| Intermediate | Root | Info |
| DigiCert EV RSA CA G2 (SHA2-256) |
DigiCert Global Root G2 (SHA2-256) |
G2 root |
| DigiCert Global G3 TLS ECC SHA384 2020 CA1 (SHA384ECDSA) | DigiCert Global Root G3 (SHA384ECDSA) | G3 root |
| DigiCert TLS Hybrid ECC SHA384 2020 CA1 (SHA2-384) | DigiCert Global Root CA (SHA1) | NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026 |
| DigiCert SHA2 Extended Validation Server CA (SHA2-256) | DigiCert High Assurance EV Root CA (SHA1) | NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026 |
| DigiCert G5 TLS RSA4096 SHA384 2021 CA1 (SHA2-384) | DigiCert TLS RSA4096 Root G5 (SHA2-384) | The G5 root is not widely trusted and requires a cross-signed intermediate. |
| DigiCert G5 TLS ECC SHA384 2021 CA1 (SHA384ECDSA) | DigiCert TLS ECC P384 Root G5 (SHA384ECDSA) | The G5 root is not widely trusted and requires a cross-signed intermediate. |
DigiCert OV SSL ICAs
| Intermediate | Root | Info |
| DigiCert Global G2 TLS RSA SHA256 2020 CA1 (SHA2-245) |
DigiCert Global Root G2 (SHA2-256) |
G2 Root |
| DigiCert Global G3 TLS ECC SHA384 2020 CA1 (SHA384ECDSA) | DigiCert Global Root G3 (SHA384ECDSA) | G3 Root |
| DigiCert TLS RSA SHA256 2020 CA1 (SHA2-256) | DigiCert Global Root CA (SHA1) | NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026 |
| DigiCert TLS Hybrid ECC SHA384 2020 CA1 (SHA2-384) | DigiCert Global Root CA (SHA1) | NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026 |
| DigiCert G5 TLS RSA4096 SHA384 2021 CA1 (SHA2-384) | DigiCert TLS RSA4096 Root G5 (SHA2-384) | The G5 root is not widely trusted and requires a cross-signed intermediate. |
| DigiCert G5 TLS ECC SHA384 2021 CA1 (SHA384ECDSA) | DigiCert TLS RSA4096 Root G5 (SHA2-384) | The G5 root is not widely trusted and requires a cross-signed intermediate. |