Certificate Management Service:[Announcement] Alibaba Cloud-branded root certificate update

Upgrade impact

• Certificates issued before September 18, 2025 are not affected and continue to work normally.

• Alibaba Cloud-branded SSL certificates issued on or after September 18, 2025 will use new root and intermediate certificates.

• If you use SSL certificates issued on or after September 18, 2025 for PC or mini-program services, you are generally not affected. The TLS Root R46 Root Certificate and the cross-certificate are pre-installed in mainstream operating systems, mobile platforms, and JDK environments, so client incompatibility is unlikely.

• If you use SSL certificates issued on or after September 18, 2025 for mobile apps, IoT devices, non-PC browsers, or Java clients, the root certificates previously pre-installed on these devices are affected. You can download the latest root and intermediate certificates to replace them, or configure your client to use the system trust store for certificate validation to ensure a secure HTTPS connection between client and server.

If you have any questions, You can contact your account manager for assistance.

Thank you for your support!

Upgrade details

The affected root certificates are listed in the following table:

The affected intermediate certificates are listed in the following table:

Download root and intermediate certificates

All certificates are in .cer format.

• Root certificate: TLS Root R46 Root Certificate

• Cross-certificate: GlobalSign Cross Certificate R3-R46

• Intermediate certificate: Alibaba Cloud GCC R46 AlphaSSL CA 2025