Where do I find SSL CA Bundle?

Note: Namecheap is offering free replacement of your current Symantec certificate to its Comodo (now Sectigo) equivalent. Addressing the market needs and keeping our hand on pulse, we want to protect our customers. We are always here to clarify any SSL-related points and provide assistance on the way. Replace your Symantec SSL today. Comodo (now Sectigo) SSLs free for existing Symantec holders

You don't need to pull out your hair anymore in an attempt to compile a correct CA Bundle for your certificate! We already did that for you.

If you have your certificate in the PKCS#7 format (appropriate mostly for IIS/Microsoft Exchange), you already have your bundle included into your certificate and do not need to install it separately.

In order to save the file it is necessary to right-click on it and use the 'save as' option. Otherwise, your browser may try to install it.

Keep in mind that Sectigo (former Comodo) CA currently has two versions of the "USERTrust RSA Certification Authority" SHA-2 root certificate. First one is cross-signed by the old SHA1 "AddTrust External CA Root" certificate and is included to the default CA Bundle provided along with the issued certificates. This should help the browsers to get acquainted to the new root certificate as the old root is widely trusted and can be a guarantee for the whole chain.

The other version is not cross-signed by any other certificate and is a self-signed SHA2 root certificate in fact. It is expected that by the time the old "AddTrust External CA Root" certificate expires (on May 2020), the new root will become trusted by most of the browsers. Then, the chains that contain this new root (not cross-signed) will become actual.
  

      New Sectigo CA Bundles (signed by SHA2 root cross-signed by SHA1 root)

Sectigo RSA DV Bundle [ Intermediate + Cross Signed ] (valid for all Domain validated certificates)
contains:

Sectigo RSA OV Bundle [ Intermediate + Cross Signed ] (valid for all Organization validated certificates)
contains:


Sectigo RSA EV Bundle [ Intermediate + Cross Signed ] (valid for all Extended validated certificates)
contains:

Sectigo ECC DV Bundle [ Intermediate + Cross Signed ] (valid for all Domain validated certificates)
contains:

Sectigo ECC OV Bundle [ Intermediate + Cross Signed ] (valid for all Organization validated certificates)
contains:

Sectigo ECC EV Bundle [ Intermediate + Cross Signed ] (valid for all Extended validated certificates)
contains:


     New Sectigo Bundles under SHA2 root certificates (not cross-signed):

Sectigo RSA Domain Validation under SHA-2 root
Sectigo RSA Organization Validation under SHA-2 root
Sectigo RSA Extended Validation under SHA-2 root

Sectigo ECC Domain Validation under SHA-2 root
Sectigo ECC Organization Validation under SHA-2 root
Sectigo ECC Extended Validation under SHA-2 root


     Sectigo SHA2 root certificates:

USERTrust RSA Certification Authority
USERTrust ECC Certification Authority

  

     Comodo SHA2 Bundles under SHA1 root certificates:

PositiveSSL/EssentialSSL SHA-2 (also applicable for PositiveSSL/EssentialSSL Wildcard and PositiveSSL Multi-domain)
InstantSSL/PremiumSSL/InstantSSL Pro SHA-2 (also applicable for PremiumSSL Wildcard, UCC and Multi-Domain SSL)
Comodo EVSSL/EV SGC SSL/EV Multi-Domain SSL SHA-2


     Comodo SHA2 Bundles under SHA2 root certificates:

Comodo Domain Validated SHA-2 under SHA-2 root
Comodo Organization Validation SHA-2 under SHA-2 root
Comodo Extended Validation SHA-2 under SHA-2 root
Comodo ECC Domain Validation
Comodo ECC Organization Validation
Comodo ECC Extended Validation


Legacy Bundles


Note: Unfortunately, there is no opportunity to receive a CA bundle with a SHA-2 root certificate for GeoTrust, Thawte and Symantec certificates through our user interface. It is necessary to perform a reissue via the End User Home area to choose a bundle with SHA-2 root.

     Geotrust:

RapidSSL/Wildcard SHA-2 under SHA-1 root
RapidSSL/Wildcard SHA-2 under SHA-2 root
QuickSSL Premium SHA-2 under SHA-1 root
QuickSSL Premium SHA-2 under SHA-2 root
TrueBusinessID SHA-2 under SHA-1 root
TrueBusinessID SHA-2 under SHA-2 root
TrueBusinessID with EV SHA-2 under SHA-1 root
TrueBusinessID with EV SHA-2 under SHA-2 root

GeoTrust DV SHA-2 under SHA-1 root intermediate for Certificate Transparency
GeoTrust DV SHA-2 under SHA-2 root intermediate for Certificate Transparency

RapidSSL SHA-2 under SHA-1 root intermediate for Certificate Transparency
RapidSSL SHA-2 under SHA-2 root intermediate for Certificate Transparency

      Thawte:

SSL 123 SHA-2 under SHA-1 root
SSL 123 SHA-2 under SHA-2 root
SSL WebServer SHA-2 under SHA-1 root
SSL WebServer SHA-2 under SHA-2 root
SSL WebServer with EV SHA-2 under SHA-1 root
SSL WebServer with EV SHA-2 under SHA-2 root

     Symantec:

Secure Site/Secure Site Pro SHA-2 under SHA-1 root
Secure Site/Secure Site Pro SHA-2 under SHA-2 root
Secure Site with EV/Secure Site Pro with EV SHA-2 under SHA-1 root
Secure Site with EV/Secure Site Pro with EV SHA-2 under SHA-2 root

Comments

We welcome your comments, questions, corrections and additional information relating to this article. Your comments may take some time to appear. Please be aware that off-topic comments will be deleted.

If you need specific help with your account, feel free to contact our Support Team. Thank you.

Need help? We're always here for you.

× Close