{"id":15992,"date":"2026-04-17T07:01:37","date_gmt":"2026-04-16T22:01:37","guid":{"rendered":"https:\/\/m365jp.net\/?p=15992"},"modified":"2026-04-17T07:02:16","modified_gmt":"2026-04-16T22:02:16","slug":"mc1282565-exchange-online-sharepoint-online-and-microsoft-teams-april-2026-industry-wide-digicert-global-root-ca-g1-distrust","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-04-17-mc1282565-exchange-online-sharepoint-online-and-microsoft-teams-april-2026-industry-wide-digicert-global-root-ca-g1-distrust","title":{"rendered":"MC1282565 | Exchange Online, SharePoint Online, and Microsoft Teams: April 2026 industry-wide DigiCert Global Root CA (G1) distrust"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1282565 | Exchange Online, SharePoint Online, and Microsoft Teams: April 2026 industry-wide DigiCert Global Root CA (G1) distrust<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n
Classification<\/th>\nplanForChange<\/td>\n<\/tr>\n
Last Updated<\/th>\n04\/16\/2026 21:18:02<\/td>\n<\/tr>\n
Start Time<\/th>\n04\/16\/2026 21:17:39<\/td>\n<\/tr>\n
End Time<\/th>\n05\/16\/2026 07:00:00<\/td>\n<\/tr>\n
Message Content<\/th>\n\n

[Introduction]<\/b><\/p>\n

To support industry-wide security improvements and modern cryptographic standards, browsers and platforms that follow Mozilla and Chrome trust stores will begin distrusting the DigiCert Global Root CA (G1)<\/b> starting April 15, 2026<\/b>. Microsoft has already migrated Microsoft 365 services to newer, more secure certificate hierarchies (such as DigiCert Global Root G2 and G3).<\/p>\n

We\u2019re sharing this notification to help you quickly identify and respond to any unexpected certificate-related connection issues that may arise in edge scenarios due to this industry trust change. This change is driven by industry trust store updates and does not represent a new change or rollout within Microsoft 365 services.<\/p>\n

[When this will happen]<\/b><\/p>\n

    \n
  • April 15, 2026<\/b>: Industry-wide distrust of DigiCert Global Root CA (G1) begins<\/li>\n
  • Microsoft monitoring period: April 15, 2026 and onward<\/b><\/li>\n<\/ul>\n

    [How this affects your organization]<\/b><\/p>\n

    Who is affected<\/i><\/p>\n

      \n
    • Organizations accessing Microsoft 365 services using:\n
        \n
      • Google Chrome or Mozilla Firefox<\/li>\n
      • Linux-based systems, containers, appliances, or software stacks that rely on Mozilla\/NSS trust stores<\/li>\n<\/ul>\n<\/li>\n
      • Only scenarios where a service endpoint still presents a TLS certificate chaining to DigiCert Global Root CA (G1)<\/b><\/li>\n<\/ul>\n

        What will happen<\/i><\/p>\n

          \n
        • Most customers will not experience any impact<\/b>.<\/li>\n
        • In rare legacy scenarios:\n
            \n
          • TLS connections may fail certificate validation<\/li>\n
          • Failures may be intermittent depending on:\n
              \n
            • Client OS patch level<\/li>\n
            • Browser version<\/li>\n
            • Container or image refresh cadence<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n
            • Common error messages may include:\n
                \n
              • NET::ERR_CERT_AUTHORITY_INVALID<\/li>\n
              • SEC_ERROR_UNKNOWN_ISSUER<\/li>\n
              • SunCertPathBuilderException<\/li>\n
              • verify error:num=19:self signed certificate in certificate chain<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                [What you can do to prepare]<\/b><\/p>\n

                No action is required if you are not experiencing certificate or TLS handshake errors.<\/p>\n

                If you encounter errors on or after April 15, 2026<\/b>:<\/p>\n

                  \n
                • Review the certificate chain presented by the failing endpoint\n
                    \n
                  • If DigiCert Global Root CA (G1)<\/b> appears:\n
                      \n
                    • Stop local debugging or repeated mitigation attempts<\/li>\n
                    • Collect the following triage information:\n
                        \n
                      • Target URL or hostname<\/li>\n
                      • Full error message and timestamp (including time zone)<\/li>\n
                      • Client OS, version, browser\/runtime, and whether it\u2019s a VM, container, or appliance<\/li>\n
                      • Certificate chain evidence (log output or screenshot)<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n
                      • Contact Microsoft Support through your normal support channel and reference:\n
                          \n
                        • \u201cApril 15, 2026 DigiCert Global Root CA (G1) industry distrust<\/i>\u201d<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

                          This information helps route your issue directly to certificate and TLS specialists and avoids unnecessary troubleshooting steps.<\/p>\n

                          [Compliance considerations]<\/b><\/p>\n

                          No compliance considerations identified. Review as appropriate for your organization.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

                          MC1282565 | Exchange Online, SharePoint Online, and Microsoft Teams: April 2026 industry-wide DigiCert Global […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-15992","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/15992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=15992"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/15992\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=15992"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=15992"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=15992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}