---
title: "Intermediate CA (ICA) selection options at DigiCert"
url: "https://help.internetx.com/en/tls-ssl-smime/intermediate-ca-selection-options-at-digicert/"
lang: "en"
section: "TLS/SSL & S/MIME"
---

# Intermediate CA (ICA) selection options at DigiCert

## What are ICA certificates used for?

Certificate Authorities (CAs) use intermediate CA (ICA) certificates to issue certificates such as your TLS/SSL certificates. The ICA certificate links your certificate to the trusted root certificate enabling browsers and other applications to trust it.

## Ordering

When ordering DigiCert TLS/SSL certificates, you can select the root or intermediate certificate to be used for signing the certificate.

The advantage: This allows you to adjust the ordered certificate to suit the specific system on which the TLS/SSL certificate will be implemented.

<div class="co co-w"><p>An ECDSA root signature can only be used with a private key that has been created with an ECC or ECDSA signature algorithm.</p></div>

## Overview of combinations

The following overview shows you the root / intermediate combinations offered by DigiCert, listed according to the certificate type.

| **Product** | **Available Options**  
| --- | --- |
| DigiCert Secure Site Pro EV | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-384 ECDSA Root |
| DigiCert Secure Site EV | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-384 ECDSA Root |
| DigiCert Secure Site Pro | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-384 ECDSA Root |
| DigiCert SecureSite | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-384 ECDSA Root |
| DigiCert Basic EV | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-384 Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-384 ECDSA Root |
| DigiCert Basic OV | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-384 ECDSA Cert + SHA-384 ECDSA Root |
|   | SHA-384 ECDSA Cert + SHA-1 Root |
| Thawte SSL Webserver EV | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-1 Root |
| Thawte SSL Webserver Wildcard | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-384 ECDSA Root |
| Thawte SSL Webserver | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-384 ECDSA Root |
| Thawte SSL123 | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
| Thawte SSL123 Wildcard | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
| GeoTrust TrueBusiness ID EV | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-1 Root |
| GeoTrust TrueBusiness ID | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-384 ECDSA Root |
| GeoTrust TrueBusiness ID Wildcard | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-1 Root |
|   | SHA-256 ECDSA Cert + SHA-384 ECDSA Root |
| QuickSSL Premium | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
| Basic SSL DV | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
| RapidSSL | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |
| RapidSSL Wildcard | SHA-256 Cert + Root |
|   | SHA-256 Cert + SHA-1 Root |