{"id":732,"date":"2014-10-16T13:45:44","date_gmt":"2014-10-16T11:45:44","guid":{"rendered":"https:\/\/www.psw-group.de\/support\/?p=85"},"modified":"2025-11-26T12:29:19","modified_gmt":"2025-11-26T11:29:19","slug":"kriegen-die-neuen-sha-2-zertifikate-eine-neue-zertifizierungskette","status":"publish","type":"post","link":"https:\/\/www.psw-group.de\/support\/kriegen-die-neuen-sha-2-zertifikate-eine-neue-zertifizierungskette\/","title":{"rendered":"Kriegen die neuen SHA-2 Zertifikate eine neue Zertifizierungskette?"},"content":{"rendered":"

Ja, die Zertifizierungsstellen stellen die Zertifizierungskette nach und nach auf SHA-2 um. Wie Sie in der Tabelle sehen werden, sind SSL-Zertifikate<\/a> und Zwischenzertifikate SHA-2, jedoch sind einige\u00a0Zertifikate von SHA-1 Root-Zertifikaten ausgestellt. In Bezug auf die \u00c4nderungen in Chrome 39 sollten keine Probleme auftreten, da Chrome nicht bis zum Root-Zertifikat \u00fcberpr\u00fcft.<\/p>\n

Comodo Zertifikate<\/h2>\n

Bei allen\u00a0Comodo\u00a0Produkten ist die komplette Zertifikatskette\u00a0SHA-2. Auf einigen Plattformen ist das Comodo\u00a0SHA-2 Root-Zertifikat\u00a0noch nicht direkt im Stammspeicher enthalten, deshalb wird auf diesen Plattformen die Zertifikats-Kette mit dem Zertifikat AddTrust-Root abgeschlossen.<\/p>\n

Zertifikatskette bei Plattformen, die das\u00a0Comodo\u00a0SHA-2 Root-Zertifikat enthalten:
\nCOMODO SHA-2 Root-> COMODO SHA-2 Intermediate\u00a0CA-> SHA-2 End-Punkt-Zertifikat<\/strong><\/p>\n

Zertifikatskette bei Plattformen, die das\u00a0Comodo\u00a0SHA-2 Root-Zertifikat nicht<\/strong> enthalten:
\nAddTrust-> COMODO SHA-2 Root-> COMODO SHA-2 Intermediate\u00a0CA-> SHA-2 End-Punkt-Zertifikat<\/strong><\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n
Produkt<\/th>\n\u00a0Encryption<\/strong><\/th>\n\u00a0Hash\u00a0End-Punkt<\/strong><\/th>\n\u00a0Intermediate<\/strong><\/th>\n\u00a0Cross-Root<\/strong><\/th>\nRoot<\/th>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\nCOMODO RSA Extended Validation SecureServerCA<\/strong><\/a><\/td>\nCOMODO RSA AddTrustCA Cross-Root<\/strong><\/a><\/td>\nAddTrust Root<\/strong><\/a><\/td>\n<\/tr>\n
Comodo EV<\/td>\nRSA, ECC<\/td>\n\u00a0SHA-2<\/td>\nSHA-384<\/td>\nSHA-384<\/td>\nSHA-1<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\nCOMODO RSA Organization Validation SecureServerCA<\/strong><\/a><\/td>\nCOMODO RSA AddTrustCA Cross-Root<\/strong><\/a><\/td>\nAddTrust Root<\/a><\/strong><\/td>\n<\/tr>\n
InstantSSL<\/td>\nRSA, ECC<\/td>\n\u00a0SHA-2<\/td>\nSHA-384<\/td>\n\u00a0SHA-384<\/td>\nSHA-1<\/td>\n<\/tr>\n
Premium SSL Wildcard<\/td>\nRSA, ECC<\/td>\n\u00a0SHA-2<\/td>\nSHA-384<\/td>\n\u00a0SHA-384<\/td>\nSHA-1<\/td>\n<\/tr>\n
Comodo UCC<\/td>\nRSA, ECC<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-384<\/td>\nSHA-384<\/td>\nSHA-1<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\nCOMODO RSA DomainValidation SecureServerCA<\/strong><\/a><\/td>\nCOMODO RSA AddTrustCA Cross-Root<\/strong><\/a><\/td>\nAddTrust Root<\/strong><\/a><\/td>\n<\/tr>\n
PositiveSSL<\/td>\nRSA, ECC<\/td>\n\u00a0SHA-2<\/td>\nSHA-384<\/td>\nSHA-384<\/td>\nSHA-1<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

 <\/p>\n

\n

GlobalSign Zertifikate<\/h2>\n
\n\n\n\n\n\n\n\n
Produkt<\/th>\nEncryption<\/strong><\/th>\nHash\u00a0End-Punkt<\/strong><\/th>\nIntermediate<\/strong><\/th>\nRoot<\/th>\n<\/tr>\n
AlphaSSL<\/td>\n\u00a0RSA<\/td>\nSHA-2<\/td>\nAlphaSSL CA – SHA256 – G2 (SHA-256)<\/strong><\/a><\/td>\nGlobalSign Root R1 (SHA-1)<\/strong><\/a><\/td>\n<\/tr>\n
GlobalSign DV<\/td>\nRSA<\/td>\nSHA-2<\/td>\nDomain Validation CA – SHA256 – G2 (SHA-256)<\/strong><\/a><\/td>\nGlobalSign Root R1 (SHA-1)<\/strong><\/a><\/td>\n<\/tr>\n
GlobalSign OV<\/td>\nRSA<\/td>\nSHA-2<\/td>\nOrganization Validation CA – SHA256 – G2 (SHA-256)<\/strong><\/a><\/td>\nGlobalSign Root R1 (SHA-1)<\/strong><\/a><\/td>\n<\/tr>\n
GlobalSign EV<\/td>\nRSA<\/td>\nSHA-2<\/td>\n\u00a0GlobalSign Extended Validation CA – SHA256 – G2 (SHA-256)<\/strong><\/a><\/td>\nGlobalSign Root R1 (SHA-1)<\/strong><\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n<\/div>\n

\n

Thawte Zertifikate<\/h2>\n
\n\n\n\n\n\n\n\n
Produkt<\/th>\nEncryption<\/strong><\/th>\nHash\u00a0End-Punkt<\/strong><\/th>\nIntermediate<\/strong><\/th>\nRoot<\/th>\n<\/tr>\n
SSL123<\/td>\n\u00a0RSA<\/td>\nSHA-2<\/td>\nthawte DV SSL SHA256 CA (SHA-256)<\/strong><\/a><\/td>\nthawte Primary Root CA – G3\u00a0(SHA-256)<\/a><\/strong><\/td>\n<\/tr>\n
SSL Web Server<\/td>\nRSA, DSA<\/td>\n\u00a0SHA-2<\/td>\nthawte SHA256 SSL CA (SHA-256)<\/strong><\/a><\/td>\nthawte Primary Root CA – G3\u00a0(SHA-256)<\/strong><\/a><\/td>\n<\/tr>\n
SGC Super Cert<\/td>\nRSA, DSA<\/td>\n\u00a0SHA-2<\/td>\nthawte SHA256 SSL CA (SHA-256)<\/strong><\/a><\/td>\nthawte Primary Root CA – G3\u00a0(SHA-256)<\/strong><\/a><\/td>\n<\/tr>\n
SSL Web Server with EV<\/td>\nRSA, DSA<\/td>\nSHA-2<\/td>\nthawte Extended Validation SHA256 SSL CA<\/strong><\/a><\/td>\nthawte Primary Root CA – G3\u00a0(SHA-256)<\/a><\/strong>
\n<\/a><\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

 <\/p>\n

\n

GeoTrust Zertifikate<\/h2>\n
\n\n\n\n\n\n\n\n
Produkt<\/th>\n\u00a0Encryption<\/strong><\/th>\n\u00a0Hash\u00a0End-Punkt<\/strong><\/th>\n\u00a0Intermediate<\/strong><\/th>\n\u00a0Cross-Root<\/strong><\/th>\nRoot<\/th>\n<\/tr>\n
QuickSSL Premium<\/td>\nRSA<\/td>\n\u00a0SHA-2<\/td>\nGeoTrust DV SSL CA – G4 (SHA-256)<\/strong><\/a><\/td>\nGeoTrust Global CA (SHA-1)<\/strong><\/a><\/td>\nEquifax Secure Certificate Authority (SHA-1)<\/a><\/strong><\/td>\n<\/tr>\n
RapidSSL<\/td>\nRSA<\/td>\n\u00a0SHA-2<\/td>\nRapidSSL SHA256 CA – G3 (SHA-256)<\/strong><\/a><\/td>\nGeoTrust Global CA (SHA-1)<\/strong><\/a><\/td>\nEquifax Secure Certificate Authority (SHA-1)<\/strong><\/a><\/td>\n<\/tr>\n
TrueBusiness ID<\/td>\nRSA<\/td>\n\u00a0SHA-2<\/td>\n<\/td>\nGeoTrust SHA256 SSL CA (SHA-256)<\/strong><\/a><\/td>\nGeoTrust Primary Certification Authority – G3 (SHA-256)<\/strong><\/a><\/td>\n<\/tr>\n
True Business ID with EV<\/td>\nRSA<\/td>\n\u00a0SHA-2<\/td>\n<\/td>\nGeoTrust Extended Validation SHA256 SSL CA (SHA-256)<\/a><\/strong><\/td>\nGeoTrust Primary Certification Authority – G3 (SHA-256)<\/strong><\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n<\/div>\n

\n

Symantec Zertifikate<\/h2>\n
\n\n\n\n\n\n\n\n\n\n
Produkt<\/th>\nEncryption<\/strong><\/th>\nHash\u00a0End-Punkt<\/strong><\/th>\nIntermediate<\/strong><\/th>\nRoot<\/th>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\nSymantec Class 3 Secure Server SHA256 SSL CA<\/a><\/strong><\/td>\nVeriSign Universal Root Certification Authority<\/strong><\/a><\/td>\n<\/tr>\n
Secure Site<\/td>\n\u00a0RSA, DSA<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-2<\/td>\n<\/tr>\n
Secure Site Pro<\/td>\nRSA, DSA, ECC<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-2<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n<\/td>\nSymantec Class 3 Extended Validation SHA256 SSL CA<\/strong><\/a><\/td>\nVeriSign Universal Root Certification Authority<\/a><\/strong><\/td>\n<\/tr>\n
Secure Site with EV<\/td>\nRSA, DSA<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-2<\/td>\n<\/tr>\n
Secure Site Pro with EV<\/td>\nRSA, DSA, ECC<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-2<\/td>\n\u00a0SHA-2<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Ja, die Zertifizierungsstellen stellen die Zertifizierungskette nach und nach auf SHA-2 um. Wie Sie in der Tabelle sehen werden, sind SSL-Zertifikate und Zwischenzertifikate SHA-2, jedoch sind einige\u00a0Zertifikate von SHA-1 Root-Zertifikaten ausgestellt. In Bezug auf die \u00c4nderungen in Chrome 39 sollten keine Probleme auftreten, da Chrome nicht bis zum Root-Zertifikat \u00fcberpr\u00fcft. Comodo Zertifikate Bei allen\u00a0Comodo\u00a0Produkten ist…<\/p>\n","protected":false},"author":15,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[531],"tags":[90,91,92,80,93,94,95],"class_list":["post-732","post","type-post","status-publish","format-standard","hentry","category-allgemeine-fragen-zur-it-security","tag-comodo","tag-geotrust","tag-globalsign","tag-sha2","tag-symantec","tag-thawte","tag-zertifizierungskette"],"_links":{"self":[{"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/posts\/732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/comments?post=732"}],"version-history":[{"count":2,"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/posts\/732\/revisions"}],"predecessor-version":[{"id":3434,"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/posts\/732\/revisions\/3434"}],"wp:attachment":[{"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/media?parent=732"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/categories?post=732"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psw-group.de\/support\/wp-json\/wp\/v2\/tags?post=732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}