0

This question already has an answer here:

I have noticed that some root and intermediate CAs have things like "G2" or "G3" in the name.

For example, take the certificate for amazon.com. The intermediate CA is DigiCert Global CA G2, and the root CA is DigiCert Global Root G2.

I understand that "G2" means "Generation 2." But what is the purpose of having a second-generation CA? What changed between the first and second generations?

marked as duplicate by AndrolGenhald, schroeder May 3 '18 at 18:44

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

0

Quoted from Tombart's answer on Crypto SE:

Yes, G stands for "Generation". When CA needs to get a new chain they just increment the generation number.

For example GoDaddy's signatures:

  • G3 - sha256WithRSAEncryption
  • G4 - ecdsa-with-SHA384

Not the answer you're looking for? Browse other questions tagged or ask your own question.