Help Center
Login Sign up
  1. Home
  2. TLS/SSL & S/MIME
  3. Intermediate CA (ICA) selection options at DigiCert

Intermediate CA (ICA) selection options at DigiCert

2 min read

What are ICA certificates used for?

Certificate Authorities (CAs) use intermediate CA (ICA) certificates to issue certificates such as your TLS/SSL certificates. The ICA certificate links your certificate to the trusted root certificate enabling browsers and other applications to trust it.

Ordering

When ordering DigiCert TLS/SSL certificates, you can select the root or intermediate certificate to be used for signing the certificate.

The advantage: This allows you to adjust the ordered certificate to suit the specific system on which the TLS/SSL certificate will be implemented.

An ECDSA root signature can only be used with a private key that has been created with an ECC or ECDSA signature algorithm.

Overview of combinations

The following overview shows you the root / intermediate combinations offered by DigiCert, listed according to the certificate type.

ProductAvailable Options
DigiCert Secure Site Pro EVSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-384 ECDSA Root
DigiCert Secure Site EVSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-384 ECDSA Root
DigiCert Secure Site ProSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-384 ECDSA Root
DigiCert SecureSiteSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-384 ECDSA Root
DigiCert Basic EVSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-384 Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-384 ECDSA Root
DigiCert Basic OVSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-384 ECDSA Cert + SHA-384 ECDSA Root
 SHA-384 ECDSA Cert + SHA-1 Root
Thawte SSL Webserver EVSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-1 Root
Thawte SSL Webserver WildcardSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-384 ECDSA Root
Thawte SSL WebserverSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-384 ECDSA Root
Thawte SSL123SHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
Thawte SSL123 WildcardSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
GeoTrust TrueBusiness ID EVSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-1 Root
GeoTrust TrueBusiness IDSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-384 ECDSA Root
GeoTrust TrueBusiness ID WildcardSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-1 Root
 SHA-256 ECDSA Cert + SHA-384 ECDSA Root
QuickSSL PremiumSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
Basic SSL DVSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
RapidSSLSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root
RapidSSL WildcardSHA-256 Cert + Root
 SHA-256 Cert + SHA-1 Root

Was this article helpful?