# DigiCert Root Certificates source: https://developer.mastercard.com/mastercard-send/documentation/digicert-root-certs/index.md Note: This information is relevant to **all users of Mastercard APIs**, including Mastercard Send and Mastercard QR customers. ### Overview {#overview} Since March/April 2025, Mastercard uses DigiCert as its Certificate Authority (CA) to renew the certificates for its API domains, such as those listed below. | RNTZ Domain | Non-RNTZ Domain | |---------------------------------|----------------------------| | sandbox.api.move.mastercard.com | sandbox.api.mastercard.com | | mtf.api.move.mastercard.com | mtf.api.mastercard.com | | api.move.mastercard.com | api.mastercard.com | Customers must ensure the below DigiCert CAs are in the required customer trust store. Failing to do so will cause customer requests to fail, possibly with errors such as 'No trusted certificate found'. ### Details of DigiCert CAs required to be in customer's trust store {#details-of-digicert-cas-required-to-be-in-customers-trust-store} Root CA: **DigiCert Global Root G2** DigiCert Site: subject=CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US issuer=CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US Valid until 15/Jan/2038 Serial #: 03:3A:F1:E6:A7:11:A9:A0:BB:28:64:B1:1D:09:FA:E5 SHA1 Fingerprint: DF:3C:24:F9:BF:D6:66:76:1B:26:80:73:FE:06:D1:CC:8D:4F:82:A4 SHA256 Fingerprint: CB:3C:CB:B7:60:31:E5:E0:13:8F:8D:D3:9A:23:F9:DE:47:FF:C3:5E:43:C1:14:4C:EA:27:D4:6A:5A:B1:CB:5F Intermediate CA: **DigiCert Global G2 TLS RSA SHA256 2020 CA1** DigiCert Site: subject=CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US issuer=CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US Valid until 29/Mar/2031 Serial #: 0C:F5:BD:06:2B:56:02:F4:7A:B8:50:2C:23:CC:F0:66 SHA1 Fingerprint: 1B:51:1A:BE:AD:59:C6:CE:20:70:77:C0:BF:0E:00:43:B1:38:26:12 SHA256 Fingerprint: C8:02:5F:9F:C6:5F:DF:C9:5B:3C:A8:CC:78:67:B9:A5:87:B5:27:79:73:95:79:17:46:3F:C8:13:D0:B6:25:A9