DigiCert Client Authentication EKU Removal Update

DigiCert Client Authentication EKU Removal Update

Further to the earlier announcement regarding the Removal of Client Authentication EKU from DigiCert & Sectigo SSL/TLS Certificates published on 31 July 2025, DigiCert has revised the timeline for the removal of the Client Authentication (clientAuth) Extended Key Usage (EKU) from its public SSL/TLS certificates.

The clientAuth EKU will now be fully removed from DigiCert public certificates effective 1 March 2027, superseding the previously scheduled date of 1 May 2026. This extension aligns with the updated Google Chrome root policy, which mandates this change to strengthen security and uphold compliance with evolving industry standards.

For clients who currently rely on the clientAuth EKU, this revised timeline provides additional time to plan and complete the necessary transition before this functionality is discontinued from public certificates.