August 2025 - Intermediate CA Change Notification

Google Trust Services is posting this notice on behalf of other Google services including Google Cloud.

During Q4 2025, a number of Google services that have historically provided an RSA leaf certificate will shift to an ECDSA leaf certificate by default. ECDSA certificates are typically more efficient than RSA certificates both in terms of size to transmit and in terms of processing power required.

Most customers won't need to do anything as a result of these changes. If you have a limited trust store or pin certificates, see our best practices for connecting to Google services at https://pki.goog/faq/#connecting-to-google.