Where can I find SSL certificates for PayPal Live API servers?

The following SSL/TLS certificates are currently valid for Live PayPal servers.
 

Warning: These SSL/TLS certificates are for use with legacy implementations ONLY. Do NOT download or install these certificates unless your integration requires an X.509 leaf certificate in your trust store.
  
PayPal is upgrading the SSL/TLS certificates used to secure our websites and API endpoints. The new certificates will use a trust chain signed by DigiCert root certificates. You may need to ensure that your environment supports connections that rely on the DigiCert root certificates. ​
 
Endpoint SSL Certificate Certificate Authority Expiration Date
api.paypal.com api.paypal.com_SHA-2_08162019.pem Symantec August 16, 2019
svcs.paypal.com svcs.paypal.com_SHA-2_08132019.pem Symantec August 13, 2019
api-3t.paypal.com api-3t.paypal.com_SHA-2_09102019.pem Symantec Sept 10, 2019
api-aa.paypal.com api-aa.paypal.com_SHA-2_09102019.pem Symantec Sept 10, 2019
api-aa-3t.paypal.com api-aa-3t.paypal.com_SHA-2_09102019.pem Symantec Sept 10, 2019
pointofsale.paypal.com pointofsale.paypal.com_SHA-2_07192019.pem Symantec July 19, 2019
posprivate.paypal.com posprivate.paypal.com_SHA-2_07192019.pem Symantec July 19, 2019
 

Upcoming Live certificate deployments: 
 
Endpoint SSL Certificate Certificate Authority Expiration Date Target Live Date
api.paypal.com api.paypal.com_DigiCertG2_08142020.pem DigiCert August 14, 2020 September 12, 2018
svcs.paypal.com TBD DigiCert TBD January 2019
api-3t.paypal.com TBD DigiCert TBD January 2019
api-aa.paypal.com TBD DigiCert TBD January 2019
api-aa-3t.paypal.com TBD DigiCert TBD January 2019
pointofsale.paypal.com TBD DigiCert TBD January 2019
posprivate.paypal.com TBD DigiCert TBD TBD
 

Note: For PayPal Sandbox SSL/TLS certificates, see Where can I find SSL certificates for PayPal Sandbox API servers?