20090517: VeriSign ends issuance on PCA3

In May 17th, 2009, VeriSign will stop issuing certificates linked to its root VeriSign Class 3 Public Primary Certification Authority
(AKI: 70 ba e4 1d 10 d9 29 34 b6 38 ca 7b 03 cc ba bf) MD2 signed.
As a replacement, VeriSign introduces its roots VeriSign Class 3 Public Primary Certification Authority - G2 and issues 2 intermediate certificates for Secure Site server certificates VeriSign Class 3 Secure Server CA - G2 ) and code signing certificates ( VeriSign Class 3 Code Signing 2009 CA)

The former root is SHA1 resigned to become VeriSign Class 3 Public Primary Certification Authority v2009. New intermediate certificates are issued: VeriSign Class 3 PPCA G5 (cross) v2009, VeriSign International Server CA - Class 3 v2009 and VeriSign EV SGC CA v2009.

Thereof, new VeriSign Secure Site and Code Signing certificates won't be compatible anymore with some browsers versions such as Netscape 4.6 to 4.78, Opera 4.1 to 5.11, JRE 1.4.2.03 to 1.4.2.05, Windows Mobile 5 and 6.

The others won't be impacted.

More information on VeriSign official website