Authorize.net is updating their SSL/TLS certificates that applications and websites use to communicate with our systems. This change may impact both browser-based and server-to-server interactions, including API users, Mobile Point of Sale (mPOS), Windows POS (VPOS app), and In-Person SDK users.
Update schedule
Production - September 21st, 2026
You may need to take action if you are taking any of the following:
Scenarios Requiring Action:
Users whose applications or websites pin the leaf certificate will need to update their settings.
Users whose applications or websites use custom trust stores will need to import the DigiCert CAs.
Users whose applications or websites pin to the CAs will need to update their pins.
Recommended Best Practices
To minimize the impact of future certificate renewals, Authorize.net recommends that merchants, partners, and developers:
- Trust the appropriate Root and Intermediate Certificate Authorities (CA).
- Use standard operating system or platform certificate validation.
- Allow certificate chain validation.
- Avoid pinning individual server certificates whenever possible.
- Avoid dependencies on certificate thumbprints, serial numbers, or expiration dates.
We advise reaching out to your solution providers, developers, or website hosts for assistance with these changes if they are needed.
We have also uploaded the needed certificate to our support article which you can find here: Where can I find the latest version of Authorize.nets server-level SSL certificates? - 000003009 - https://onevisa.crm.dynamics.com/main.aspx?appid=78eb1b8a-643f-ec11-8c60-0022480a0745&forceUCI=1&new...
We have posted a Status page maintenance notice informing clients of these changes and created support articles with helpful links and resources.
Status page: LINK
For maintenance notifications, service incidents, and major platform updates, customers are encouraged to subscribe to the Authorize.net Status Page:
Authorize.net Status Page
Thank you for helping us maintain a secure and reliable payment ecosystem.
Sincerely,
The Authorize.net Team
