Google Trust Services will be moving to new issuing intermediate CAs in the near future. TLS endpoint Old Issuer: GTS CA 1P5 New Issuer: GTS CA WR1 SXG endpoint Old Issuer: GTS CA 2A1 New Issuer: GTS CA AE1 In the future, we expect to move to multiple issuing intermediates per certificate type and will rotate issuance across intermediate CAs. Pinning to intermediate certificates is discouraged and will become increasingly problematic in the future.