Root certificate chain migration for api.stripe.com and other Stripe domains

[Soham Sen]

Hello!

Stripe will soon start issuing certificates from new root certificates[1] for all Stripe domains, including api.stripe.com. api.stripe.com will transition directly to the G5 Digicert Root. We will gradually deploy this change starting January 7, 2026.

No action is required.

In the unlikely case your system performs certificate pinning, we recommend you to update your configuration to match the recommendations and this list provided by Stripe’s documentation.

Stripe has worked with our certificate provider to minimize any disruption.

In the event you see a disruption related to TLS Certificates between January 7, 2026 and April 22, 2026, please contact sup...@stripe.com and cite this message and request escalation to the Edge and Network Infra teams.

— The Stripe team

1 - Digicert G5 and G2 Roots https://knowledge.digicert.com/general-information/digicert-root-and-intermediate-ca-certificate-updates-2023