(DC) Certificate Chain (Root and Intermediate)
Description
The following article describes what a certificate chain is, and provides the root and intermediate certificates for use with SSL certificates generated by the University of Texas at Austin certificate provider, InCommon and their partner certificate authority organization.
Certificate Chain
A full certificate chain is an ordered list of certificates that includes an SSL certificate and Certificate Authority (CA) certificates, allowing the receiver to verify that the sender and all CAs in the chain are trustworthy. The chain, or path, begins with the root certificate, which signs the intermediate certificate. The intermediate certificate is then used to sign each issued SSL certificate.
Any certificate between the SSL certificate and the root certificate is called a chain certificate, or intermediate certificate. The intermediate certificate is the signer and issuer of the SSL certificate. The root certificate is the signer and issuer of the intermediate certificate. If the intermediate certificate is not installed on the server where the SSL certificate is installed, some browsers, mobile devices, applications, and other clients may not trust the SSL certificate. To ensure compatibility with all clients, the intermediate certificate must be installed.
The chain terminates with a root certificate. The root certificate is always self-signed by the certificate authority. The signatures of all certificates in the chain must be verified up to the root certificate.
For most servers, the root and intermediate certificates that make up the CA certificate chain file are usually appended together in a single file. The root certificate is typically listed last, preceded by the intermediate certificate.
Please refer to your application - or service-specific documentation for instructions on how to configure your cryptographic or encryption settings correctly.
It is considered best practice to always update your intermediate and root certificates when updating the certificate, this will help ensure you always have the correct chain.
The following root and intermediate certificates are valid for all InCommon/CERTInext certificates issued or generated on July 18, 2026 to present.
Root Certificate
Intermediate Certificate
InCommon/Sectigo Certificates AFTER May 4, 2026 and BEFORE July 17, 2026.
The following root and intermediate certificate are valid on all certificates issued/generated on or AFTER May 4, 2026 and BEFORE July 17, 2026.
NOTE: Any InCommon/Sectigo certificates generated on/after May 4th, 2026 will begin to expire November 19th, 2026 through February 1, 2027.
Root Certificate
Intermediate Certificate
InCommon/Sectigo Certificates requested BEFORE May 4, 2026
The following root and intermediate certificates are valid for all InCommon/Sectigo certificates issued or generated BEFORE May 4, 2026.
NOTE: Any InCommon/Sectigo certificates generated before May 4th, 2026 will expire on or before November 19th, 2026.