Will PayPal be upgrading THEIR own SSL cert?

[OzWizard]

PayPal's very own EV SSL certificate will be distrusted in an upcoming release of the Chrome browser.

The certificate used to load https://www.paypal.com/webapps/hermes?token=XXXXXXXXXXXXXX&useraction=commit&rm=2&mfid=XXXXXXXXXX uses an SSL certificate that will be distrusted in an upcoming release of Chrome. Once distrusted, users will be prevented from loading this resource. See https://g.co/chrome/symantecpkicerts for more information.

Symantec was lazy and issued invalid EV certificates, so Chromium decided to distrust their CA. Symantec ended up selling their PKI business to DigiCert.

Does anyone know when PayPal will be updating their EV certs to avoid disruption of services? The new DigiCert CA to replace Symantec's should be up no later than December 1. Why did PayPal even bother buying a Symtantec EV on 9/21/2017?

[OzWizard]

I got a reply from Merchant Technical Support on 3/27:

We are aware of this issue and we are taking the necessary steps to resolve the problem. 

[armthepit]

Is there a workaround?

[OzWizard]

No. PayPal must update their servers.