March 2024 - Intermediate CA Update

Google Trust Services will be moving to new issuing intermediate CAs in the near future.

TLS endpoint

  • Old Issuer: GTS CA 1P5
  • New Issuer: GTS CA WR1

SXG endpoint

  • Old Issuer: GTS CA 2A1
  • New Issuer: GTS CA AE1

In the future, we expect to move to multiple issuing intermediates per certificate type and will rotate issuance across intermediate CAs. Pinning to intermediate certificates is discouraged and will become increasingly problematic in the future.