A while back i posted about changes coming up to how public Certificate Authorities like DigiCert and Let's Encrypt issue certificates. This change, affecting the ExtendedKeyUsage extension was driven by Google updating their Chrome Root policy.

The original deadline for this change was May of this year, however, Google have just pushed that back to March 2027.

I've taken this updated my original blog post with more information and the new dates, you can read it here: https://community.ibm.com/community/user/blogs/robert-parker1/2025/09/23/ibm-mq-and-extended-key-usage