Understanding SSL Leaf Level Certificates and Yearly Renewals

Authorize.net recommends that your site and applications trust the root and intermediate CS SSL certificate instead of the server-level certificate. This approach helps you avoid the need to update or install the newest leaf certificate, which is updated annually before their expiration dates.

If your application only trusts the root and intermediate level certificates, there is no need to install the certificates attached to this article.

Latest Update:

The latest update will occurred from 2/20/2024 ~10:00pm PT - 02/21/2024 ~10:00pm PT for both Sandbox and Product environment. The updated leaf certificate is attached as of 01/23/2024.

Impacted API endpoints:

• api.authorize.net
• api2.authorize.net
• apitest.authorize.net
• secure.authorize.net
• secure2.authorize.net
• test.authorize.net

Procedure to Obtain Authorize.Net SSL Certificate if Required

1. Navigate to the API endpoint your solution/host is communicating with. This will depend on the API and environment being integrated or connected to. Please refer to your developer/solution provider or the Developer Center and see: Authorize.net Domains and IP Addresses.
2. Download the root and intermediate certificates from Entrust:
   • To download the Root Certificate (Entrust.net):
     • Select File > Properties > Certificates > Certification Path tab.
     • Choose the highest level of the certification path tree: 'Entrust.net'.
     • Click View Certificate > Details tab > Copy to File... > Next > Next.
     • Enter a filename (suggested filename: entrust_net.crt) and click Next > Finish.
   • To download the Intermediate Certificate (Entrust Certification Authority - L1K)
     • Select File > Properties > Certificates > Certification Path tab.
     • Choose the second level of the certification path tree: 'Entrust Certification Authority - L1K'.
     • Click View Certificate > Details tab > Copy to File... > Next > Next.
     • Enter a filename (suggested filename: entrust_L1K.crt) and click Next > Finish.

Alternative Options for Obtaining the Certificates:

• Obtain from Entrust directly: Entrust Root Certificates Download
• Use SSL Labs:
  1. Go to SSL Labs
  2. Enter the API endpoint/url
  3. Click Submit
  4. Review the Certificate section of the results.
  5. Use the download option for the leaf cert and intermediate/root CA as needed.