Subject: 

Upcoming TLS Certificate Chain Update: Action Required for Legacy Clients by March 15, 2026

Body:

## Background

Rollbar uses DigiCert for the SSL certificate on api.rollbar.com, the domain that Rollbar SDKs typically send error, deploy, and replay data to.  DigiCert and major browser/OS vendors are phasing out DigiCert's first-generation root certificate, “DigiCert Global Root CA” (G1). Mozilla and Google Chrome will distrust all TLS certificates chained to G1 on April 15, 2026. To maintain service, Rollbar is reissuing our TLS certificates under DigiCert’s Global Root G2 hierarchy well in advance of that deadline.

Most modern operating systems and browsers have trusted G2 since 2014, but embedded devices, firmware, or air-gapped servers that have never updated their trust stores will reject G2. Any device or application that communicates with api.rollbar.com—whether via an embedded SDK, an on-premises agent, or a server-to-server integration, must trust the DigiCert G2 root certificate. Once Rollbar updates our certificate to the G2 switch, those clients will fail TLS handshakes unless they have installed the newer roots.

G2 is expected to be trusted by Mozilla and Chrome until April 15, 2029. We anticipate upgrading beyond G2 in 2028.

## Actions Required
What you need to do now:

1. Verify trust for DigiCert Global Root G2 across all endpoints that call Rollbar (api.rollbar.com).

This can be done by performing `curl -v https://cacerts.digicert.com/DigiCertGlobalRootG2.crt` from any devices that make calls to `api.rollbar.com`. Any failure like `curl: (60) SSL certificate problem: unable to get local issuer certificate` indicates that the local certificate store is out of date and requires updating, which typically involves: 

      - Linux: ensure ca-certificates (or equivalent) has been updated since 2015.

      - Windows/macOS/iOS/Android: apply OS updates to pull in the newer roots.

      - Embedded systems: manually install DigiCert’s G2 roots or update firmware.

2. Plan your updates before the cutover date, March 15, 2026.

3. Prepare for future root changes. Because Mozilla will distrust G2 on April 15, 2029, devices that haven't updated their trust stores will need additional maintenance ahead of that date.

If specific devices or integrations can’t be updated in time, contact Rollbar Support (support@rollbar.com) for assistance.

Thank you for your continued support as a Rollbar customer.