How to Select Intermediate and Root Certificates for GeoTrust SSL
You may select different intermediate and root certificates (ICAs) when generating your GeoTrust SSL certificate on TheSSLStore.com.
The majority of users should keep the default Intermediate option.
If you need to select a specific intermediate and root certificate for your GeoTrust SSL, please use these tables as a reference to pick the correct chain on your SSL generation form.
(Note: the certificate menu may only show the name of the intermediate certificate – the tables indicate which root will be provided for each intermediate selection).
GeoTrust EV SSL ICAs
| Intermediate | Root | |
| GeoTrust EV RSA CA G2 (SHA2-256) |
DigiCert Global Root G2 (SHA2-256) |
G2 root |
| GeoTrust TLS ECC CA G1 (SHA256ECDSA) | DigiCert Global Root G3 (SHA384ECDSA) | G3 root |
| GeoTrust EV RSA CA 2018 (SHA2-256) | DigiCert High Assurance EV Root CA (SHA1) | NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026 |
| GeoTrust EV ECC CA 2018 (SHA2-256) | DigiCert High Assurance EV Root CA (SHA1) | NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026 |
| GeoTrust G5 TLS RSA4096 SHA384 2022 CA1 (SHA2-384) | DigiCert TLS RSA4096 Root G5 (SHA2-384) | The G5 root is not widely trusted and requires a cross-signed intermediate. |
| GeoTrust G5 TLS ECC P-384 SHA384 2022 CA2 (SHA384ECDSA) | DigiCert TLS ECC P384 Root G5 (SHA384ECDSA) | The G5 root is not widely trusted and requires a cross-signed intermediate. |
GeoTrust OV SSL ICAs
| Intermediate | Root | |
| GeoTrust TLS RSA CA G1 (SHA2-256) |
DigiCert Global Root G2 (SHA2) |
G2 root |
| GeoTrust TLS ECC CA G1 (SHA2ECDSA) | DigiCert Global Root G3 (SHA384ECDSA) | G3 root |
| GeoTrust RSA CA 2018 (SHA2-256) | DigiCert Global Root CA (SHA1) | NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026 |
| GeoTrust ECC CA 2018 (SHA2-256) | DigiCert Global Root CA (SHA1) | NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026 |
| GeoTrust G5 TLS RSA4096 SHA384 2022 CA1 (SHA2-384) | DigiCert TLS RSA4096 Root 65 (SHA2-384) | The G5 root is not widely trusted and requires a cross-signed intermediate. |
| GeoTrust G5 TLS ECC P-384 SHA384 2022 CA2 (SHA384ECDSA) | DigiCert TLS ECC P384 Root G5 | The G5 root is not widely trusted and requires a cross-signed intermediate. |
GeoTrust DV SSL
At this time, Domain Validation (DV) level SSL cannot change intermediate or root certificates during enrollment or re-issue.
The default root for GeoTrust DV SSL is DigiCert Global Root G2.
If you need help with the intermediate and root chain for your DV SSL certificate, please open a support ticket from your account email address for best assistance.