0

I have noticed that some root and intermediate CAs have things like "G2" or "G3" in the name.

For example, take the certificate for amazon.com. The intermediate CA is DigiCert Global CA G2, and the root CA is DigiCert Global Root G2.

I understand that "G2" means "Generation 2." But what is the purpose of having a second-generation CA? What changed between the first and second generations?

Improve this question
1

1 Answer 1

Reset to default
0

Quoted from Tombart's answer on Crypto SE:

Yes, G stands for "Generation". When CA needs to get a new chain they just increment the generation number.

For example GoDaddy's signatures:

  • G3 - sha256WithRSAEncryption
  • G4 - ecdsa-with-SHA384
Improve this answer

Not the answer you're looking for? Browse other questions tagged .