[Important] Stripe certificates trust chain changing February 1, 2026

[Soham Sen]

Hello,

Starting February 1, 2026, Stripe will issue certificates from new root certificates for all Stripe domains. This includes api.stripe.com, which will transition from being issued from "DigiCert High Assurance EV Root CA," the historical root we've used, to one of the other roots listed in our docs.

This email is a follow-up to our initial notification November 11, 2025, to the Stripe API Announcements mailing list.

The next root for api.stripe.com will now likely be issued from "DigiCert Assured ID Root G2" root rather than "DigiCert TLS RSA4096 Root G5," as mentioned in the earlier notification. However, we may issue from any CA listed on our documentation page without further pre-notice.

What you need to do

If your system doesn’t perform certificate pinning, no action is required. Otherwise, you must update your configuration to match the TLS certificates listed in our docs to avoid a disruption to your ability to process payments.

If you experience issues related to TLS certificates while connecting to Stripe domains between February 1, 2026, and April 15, 2026, please contact us citing this message, and request escalation to the Edge and Network Infra teams.

Thanks,
The Stripe team