Windows root certificate program members november 2009
0 likes13,061 views
This document provides an overview of changes to the Windows Root Certificate Program in November 2009, including: - 2 new certification authorities added from Brazil and India - 5 new root certificates added for existing CAs - Existing CA Izenpe S.A. enabled for extended validation certificates - 1 root certificate removed that expired - A list of all certificates currently in distribution from member CAs
Windows root certificate program members november 2009
- 1. Windows Root Certificate Program Members For the Root Update Available on: November 24, 2009 Table of Contents INTRODUCTION NEW CERTIFICATION AUTHORITIES NEW ROOT CERTIFICATES NEW CERTIFICATE ATTRIBUTES CERTIFICATES REMOVED FROM DISTRIBUTION CERTIFICATES IN DISTRIBUTION FROM ALL MEMBER CAs EXPLANATION OF TERMS THE WINDOWS ROOT CERTIFICATE PROGRAM HOW WINDOWS UPDATES ROOT CERTIFICATES (ROOT UPDATE MECHANISMS) INTRODUCTION The following table lists all Windows Root Certificate Program members. In all cases the information provided about root certificates is reproduced to the best or our ability, its accuracy is not warranted or guaranteed in any way. To confirm actual root certificate details, you are advised to follow the hyperlink to the Certification Authority’s (CA’s) website, and confirm the details there. Microsoft qualifies member CAs for the Windows Root Certificate Program according to certain general and technical requirements. See the Windows Root Certificate Program Web site for a list of all the current general and technical requirements. Back to the top Page 1
- 2. NEW CERTIFICATION AUTHORITIES Microsoft welcomes the following 2 new Certification Authorities (CAs) to the Windows Root Certificate Program in November 2009: Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Government of Brazil, Instituto Nacional de Brazil Autoridade 2048 SHA1 T hursday, uly J 7 0 5d 2b 45 65 c7 04 7a Tecnologia da Informação (ITI) Certificadora Raiz 2 2 9, 021 54 06 94 a7 9a f7 ab b8 Brasileira v1 11:17:10 AM 42 bd c1 61 Government of India, Ministry of India CCA India 2007 2048 SHA1 F riday, uly 3, J 0 97 22 6a ae 4a 7a 64 a5 Communications & Information Technology, 2 015 11:02:48 9b d1 67 87 f2 7f 84 1c 0a Controller of Certifying Authorities (CCA) PM 00 1f d0 NEW ROOT CERTIFICATES Microsoft also adds the following new 5 root certificates for 4 existing member CAs; (ipsCA’s root certificates were added via auto root update in October 2009): Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Autoridad de Certificacion Firmaprofesional Spain Autoridad de 4096 SHA1 T uesday, ae c5 fb 3f c8 e1 bf c4 e5 Certificacion D ecember 1, 3 4f 03 07 5a 9a e8 00 b7 Firmaprofesional CIF 2 030 12:38:15 f7 b6 fa A62634068 AM Entrust Canada Entrust.net 2048 SHA1 T uesday, uly 4, J 2 5 0 30 06 09 1d 97 d4 f5 Certification 2 029 6:15:12 AM ae 39 f7 cb e7 92 7d 7d Authority (2048) 65 2d 34 31 Internet Publishing Services s.l. (ipsCA) Spain ipsCA Global CA Root 2048 SHA1 T uesday, 3c 71 d7 0e 35 a5 da a8 D ecember 5, 2 b2 e3 81 2d c3 67 74 17 2 029 6:38:44 AM f5 99 0d f3 Page 2
- 3. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size i psCA Main CA Root 2048 SHA1 T uesday, cf e4 31 3d ba 05 b8 a7 D ecember 5, 2 c3 00 63 99 5a 9e b7 c2 2 029 6:54:36 AM 47 ad 8f d5 SECOM Trust Systems Co. Ltd. Japan Security 2048 SHA256 M onday, ay 8, M 2 5f 3b 8c f2 f8 10 b3 7d 78 Communication 2 029 9:00:39 PM b4 ce ec 19 19 c3 73 34 RootCA2 b9 c7 74 NEW CERTIFICATE ATTRIBUTES Additionally, existing CA Izenpe S.A. is enabled to support the issuance of Extended Validation (EV) SSL certificates. The root certificates added this month for Entrust and SECOM Trust Systems, Co. Ltd. are also enabled to support EV SSL. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Government of Spain (CAV), Izenpe S.A. Spain Izenpe.com 4096 SHA1 S unday, 3 0 77 9e 93 15 02 2e 94 D ecember 3, 1 85 6a 3f f8 bc f8 15 b0 82 2 037 12:27:25 f9 ae fd AM CERTIFICATES REMOVED FROM DISTRIBUTION We also remove the following root certificate from distribution based either on certificate expiration, the CA migrating to another root certificate, or the controlling entity having ceased to function as a CA. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Comodo USA Comodo Trusted 2048 SHA1 Sunday, e1 9f e3 0e 8b 84 60 9e Certificate Services December 31, 80 9b 17 0d 72 a8 c5 ba 2028 4:59:59 PM 6e 14 09 bd Page 3
- 4. Back to the top Page 4
- 5. CERTIFICATES IN DISTRIBUTION FROM ALL MEMBER CAs Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Actalis S.p.A. Italy Actalis Authentication 2048 SHA1 S aturday, une J 91 58 c5 ef 98 73 01 CA G1 2 2 5, 022 7:06:00 a8 90 3c fd ab 03 d7 AM 2d a1 d8 89 09 c9 Agencia Catalana de Certificacio (CATCert) Spain Agencia Catalana de 2048 SHA1 1/7/2031 28 90 3a 63 5b 52 80 Certificacio (NIF Q- fa e6 77 4c 0b 6d a7 0801176-I) d6 ba a6 4a f2 e8 Agencia Notarial de Certificación (ANCERT) Spain ANCERT 2048 SHA1 2/11/2024 0c fd 83 db ae 44 b9 Corporaciones de a0 c8 f6 76 f3 b5 70 65 Derecho Publico 0b 94 b6 9d bf ANCERT Certificados 2048 SHA1 2/11/2024 11 c5 b5 f7 55 52 b0 CGN 11 66 9c 2e 97 17 de 6d 9b ff 5f a8 10 Agencia Notarial de 2048 SHA1 2/11/2024 c0 9a b0 c8 ad 71 14 Certificacion S.L. 71 4e d5 e2 1a 5a 27 Unipersonal - CIF 6a dc d5 e7 ef cb B83395988 AOL USA America Online Root 4096 SHA1 9/27/2037 85 b5 ff 67 9b 0c 79 96 Certification 1f c8 6e 44 22 00 46 Authority 2 13 db 17 92 84 America Online Root 2048 SHA1 Thursday, 39 21 c1 15 c1 5d 0e Certification November 19, ca 5c cb 5b c4 f0 7d 21 Authority 1 2037 1:43:00 PM d8 05 0b 56 6a AS Sertifitseerimiskeskuse (SK) Estonia Juur-SK AS 2048 SHA1 Friday, August 26, 40 9d 4b d9 17 b5 5c Sertifitseerimiskesku 2016 7:23:01 AM 27 b6 9b 64 cb 98 22 s 44 0d cd 09 b8 89 A-Trust Austria A-Trust-nQual-01 2048 SHA1 Sunday, 51 a4 4c 28 f3 13 e3 f9 November 30, cb 5e 7c 0a 1e 0e 0d 2014 4:00:00 PM d2 84 37 58 ae A-Trust-Qual-02 2048 SHA1 Tuesday, 67 9a 4f 81 fc 70 5d de December 02, c4 19 77 8d d2 eb d8 2014 4:00:00 PM 75 f4 c2 42 c6 Page 5
- 6. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size A-Trust-nQual-03 2048 SHA1 Monday, August d3 c0 63 f2 19 ed 07 17, 2015 3:00:00 3e 34 ad 5d 75 0b 32 PM 76 29 ff d5 9a f2 A-Trust-Qual-01 2048 SHA1 Sunday, e6 19 d2 5b 38 0b 7b November 30, 13 fd a3 3e 8a 58 cd 2014 4:00:00 PM 82 d8 a8 8e 05 15 A-Trust Qual-01 2048 SHA1 Sunday, February f8 25 57 8f 8f 54 84 df 06, 2005 4:00:00 b4 0f 81 86 7c 39 2d PM 6c b0 01 2b 92 A-Trust-Qual-03a 2048 SHA1 T uesday, pril 4, 42 ef dd e6 bf f3 5e d0 A 2 2 018 3:00:00 PM ba e6 ac dd 20 4c 50 ae 86 c4 f4 fa Austrian Society for Data Protection (Arge Austria Arge Daten 1024 MD5 Thursday, 8e 10 32 e9 24 59 44 Daten) Oesterreichische February 12, f8 47 91 98 3e c9 e8 Gesellschaft fuer 2009 4:30:30 AM 29 cb 10 59 b4 d3 Datenschutz A-CERT Certification 2048 SHA1 Sunday, October 29 64 b6 86 13 5b 5d Service 23, 2011 7:14:14 fd dd 32 53 a8 9b bc AM 24 d7 4b 08 c6 4d Austrian Society for 4096 SHA1 Thursday, 34 2c d9 d3 06 2d a4 Data Protection September 18, 8c 34 69 65 29 7f 08 GLOBALTRUST 2036 7:12:35 AM 1e bc 2e f6 8f dc Certification Service Autoridad de Certificacion Firmaprofesional Spain Autoridad de 2048 SHA1 Thursday, October a9 62 8f 4b 98 a9 1b Certificacion 24, 2013 3:00:00 48 35 ba d2 c1 46 32 Firmaprofesional CIF PM 86 bb 66 64 6a 8c A62634068 Autoridad de 4096 SHA1 T uesday, ae c5 fb 3f c8 e1 bf c4 e5 Certificacion D ecember 1, 3 4f 03 07 5a 9a e8 00 b7 Firmaprofesional CIF 2 030 12:38:15 f7 b6 fa A62634068 AM Buypass Norway Buypass Class 2 CA 1 2048 SHA1 1 0/13/2016 a0 a1 ab 90 c9 fc 84 7b 3b 12 61 e8 97 7d 5f d3 22 61 d3 cc Page 6
- 7. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Buypass Class 3 CA 1 2048 SHA1 5 /9/2015 61 57 3a 11 df 0e d8 7e d5 92 65 22 ea d0 56 d7 44 b3 23 71 CA Disig a.s. Slovak CA Disig 2048 SHA1 M onday, arch M 2 a c8 d5 8b 57 ce bf 2f Republic 2 2 1, 016 5:39:34 49 af f2 fc 76 8f 51 14 PM 62 90 7a 41 Camerfirma Spain Chambersign 2048 SHA1 Wednesday, 6e 3a 55 a4 19 0c 19 Chambers of September 30, 5c 93 84 3c c0 db 72 Commerce Root 2037 9:13:44 AM 2e 31 30 61 f0 b1 Chambersign Global 2048 SHA1 Wednesday, 33 9b 6b 14 50 24 9b Root September 30, 55 7a 01 87 72 84 d9 2037 9:14:18 AM e0 2f c3 d2 d8 e9 Chambersign Public 2048 SHA1 Wednesday, ee 29 d6 ea 98 e6 32 Notary Root September 30, c6 e5 27 e0 90 6f 02 2037 9:14:49 AM 80 68 8b df 44 dc Chambers of 4096 SHA1 S aturday, uly 1, 78 6a 74 ac 76 ab 14 J 3 Commerce Root - 2 038 5:29:50 AM 7f 9c 6a 30 50 ba 9e 2008 a8 7e fe 9a ce 3c Global Chambersign 4096 SHA1 S aturday, uly 1, 4a bd ee ec 95 0d 35 J 3 Root - 2008 2 038 5:31:40 AM 9c 89 ae c7 52 a1 2c 5b 29 f6 d6 aa 0c CertEurope France France CertEurope Root CA 4096 SHA1 F riday, arch 7, M 2 fa 08 82 59 5f 9c a6 a1 2 2 037 4:00:00 PM 1e cc be af 65 c7 64 c0 cc c3 11 d0 Certicámara S.A. Colombi Certicámara S.A. 2048 SHA1 Monday, February 4f 55 5c e2 0d cd 33 a 23, 2015 64 e0 dc 7c 41 ef dd 40 10:10:37 AM f5 03 56 c1 22 Certicámara S.A. 2048 SHA1 Monday, May 23, 8b 1a 11 06 b8 e2 6b 2011 3:00:00 PM 23 29 80 fd 65 2e 61 81 37 64 41 fd 11 AC Raíz Certicámara 4096 SHA1 T uesday, pril 2, b a1 c5 f8 b0 e3 5e b8 A 0 c S.A. 2 030 1:42:02 PM b9 45 12 d3 f9 34 a2 e9 06 10 d3 Page 7
- 8. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Certigna France Certigna 2048 SHA1 T uesday, une 9, 1 2e 13 63 45 86 a4 J 2 b 2 027 8:13:05 AM 6f 1a b2 60 68 37 58 2d c4 ac fd 94 97 Certipost s.a./n.v. Belgium Certipost E-Trust 2048 SHA1 Saturday, July 26, 05 60 a2 c7 38 ff 98 d1 Primary TOP Root CA 2025 3:00:00 AM 17 2a 94 fe 45 fb 8a 47 d6 65 37 1e Certipost E-Trust 2048 SHA1 Sunday, July 26, 74 2c df 15 94 04 9c bf Primary Qualified CA 2020 3:00:00 AM 17 a2 04 6c c6 39 bb 38 88 e0 2e 33 Certipost E-Trust 2048 SHA1 Sunday, July 26, a5 9c 9b 10 ec 73 57 Primary Normalised 2020 3:00:00 AM 51 5a bb 66 0c 4d 94 CA f7 3b 9e 6e 92 72 CertiSign Brazil Certisign Autoridade 1024 MD5 Tuesday, June 26, 00 48 f8 d3 7b 15 3f 6e Certificadora AC1S 2018 5:00:00 PM a2 79 8c 32 3e f4 f3 18 a5 62 4a 9e Certisign - 1024 MD5 Tuesday, June 26, 4e fc ed 9c 6b dd 0c 98 Autoridade 2018 5:00:00 PM 5c a3 c7 d2 53 06 3c Certificadora - AC2 5b e6 fc 62 0c Certisign Autoridade 1024 MD5 Tuesday, June 26, 54 f9 c1 63 75 9f 19 04 Certificadora AC4 2018 5:00:00 PM 51 21 a3 19 f6 4c 2d 05 55 b7 e0 73 Certisign Autoridade 1024 MD5 Monday, July 09, cf f8 10 fb 2c 4f fc 01 Certificadora AC3S 2018 1:56:32 PM 56 bf e1 e1 fa bc b4 18 c6 8d 31 c5 certSIGN Romania certSIGN ROOT CA 2048 SHA1 7 /4/2031 f a b7 ee 36 97 26 62 fb 2d b0 2a f6 bf 03 fd e8 7c 4b 2f 9b China Internet Network Information Center China CNNIC Root 2048 SHA1 4 /15/2027 8b af 4c 9b 1d f0 2a 92 (CNNIC) f7 da 12 8e b9 1b ac f4 98 60 4b 6f Chunghwa Telecom Corporation Taiwan ePKI Root 4096 SHA1 T uesday, 6 7 65 0d f1 7e 8e 7e ROC Certification D ecember 9, 1 5b 82 40 a4 f4 56 4b cf Authority 2 034 7:31:27 PM e2 3d 69 c6 f0 Page 8
- 9. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Cisco Systems USA Cisco Root CA 2048 2048 SHA1 M onday, ay 4, M 1 d e 99 0c ed 99 e0 43 2 029 12:25:42 1f 60 ed c3 93 7e 7c d5 PM bf 0e d9 e5 fa Colegio de Registradores Mercantile (Spanish Spain Spanish Property & 2048 SHA1 Friday, April 27, fa aa 27 b8 ca f5 fd f5 Property & Commerce Registry) Commerce Registry 2012 2:39:50 AM cd a9 8a c3 37 85 72 CA e0 4c e8 f2 e0 Comodo USA UTN - DATACorp SGC 2048 SHA1 Monday, June 24, 58 11 9f 0e 12 82 87 2019 12:06:30 ea 50 fd d9 87 45 6f 4f PM 78 dc fa d6 d4 UTN - USERFirst- 2048 SHA1 Tuesday, July 09, b1 72 b1 a5 6d 95 f9 1f Client Authentication 2019 10:36:58 e5 02 87 e1 4d 37 ea and Email AM 6a 44 63 76 8a UTN-USERFirst- 2048 SHA1 Tuesday, July 09, e1 2d fb 4b 41 d7 d9 Object 2019 11:40:36 c3 2b 30 51 4b ac 1d AM 81 d8 38 5e 2d 46 COMODO 2048 SHA1 Monday, 66 31 bf 9e f7 4f 9e b6 Certification December 31, c9 d5 a6 0c ba 6a be Authority 2029 4:59:59 PM d1 f7 bd ef 7b Comodo AAA 2048 SHA1 Sunday, d1 eb 23 a4 6d 17 d6 Certificate Services December 31, 8f d9 25 64 c2 f1 f1 60 2028 4:59:59 PM 17 64 d8 e3 49 COMODO ECC ECC384 SHA2 M onday, anuary J 9 f 74 4e 9f 2b 4d ba ec Certification 1 2 8, 038 3:59:59 0f 31 2c 50 b6 56 3b Authority PM 8e 2d 93 c3 11 AddTrust External CA 2048 SHA1 S aturday, ay 0, 02 fa f3 e2 91 43 54 68 M 3 Root 2 020 3:48:38 AM 60 78 57 69 4d f5 e4 5b 68 85 18 68 ComSign Israel ComSign Advanced 4096 SHA1 Saturday, March 80 bf 3d e9 a4 1d 76 Security CA 24, 2029 2:55:55 8d 19 4b 29 3c 85 63 PM 2c db c8 ea 8c f7 ComSign CA 2048 SHA1 Monday, March e1 a4 5b 14 1a 21 da 19, 2029 8:02:18 1a 79 f4 1a 42 a9 61 AM d6 69 cd 06 34 c1 Page 9
- 10. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size ComSign Secured CA 2048 SHA1 Friday, March 16, f9 cd 0e 2c da 76 24 c1 2029 8:04:56 AM 8f bd f0 f0 ab b6 45 b8 f7 fe d5 7a DanID Denmark TDC Internet Root CA 2048 SHA1 Monday, April 05, 21 fc bd 8e 7f 6c af 05 2021 10:03:17 1b d1 b3 43 ec a8 e7 AM 61 47 f2 0f 8a TDC OCES CA 2048 SHA1 Wednesday, 87 81 c2 5a 96 bd c2 fb February 11, 4c 65 06 4f f9 39 0b 26 2037 2:09:30 AM 04 8a 0e 01 Deutsche Telekom German Deutsche Telekom 2048 SHA1 Tuesday, July 09, 85 a4 08 c0 9c 19 3e y Root CA 2 2019 4:59:00 PM 5d 51 58 7d cd d6 13 30 fd 8c de 37 bf DigiCert USA DigiCert Assured ID 2048 SHA1 Sunday, 05 63 b8 63 0d 62 d7 Root CA November 09, 5a bb c8 ab 1e 4b df 2031 5:00:00 PM b5 a8 99 b2 4d 43 DigiCert High 2048 SHA1 Sunday, 5f b7 ee 06 33 e2 59 Assurance EV Root November 09, db ad 0c 4c 9a e6 d3 8f CA 2031 5:00:00 PM 1a 61 c7 dc 25 DigiCert Global Root 2048 SHA1 Sunday, a8 98 5d 3a 65 e5 e5 CA November 09, c4 b2 d7 d6 6d 40 c6 2031 5:00:00 PM dd 2f b1 9c 54 36 DigiNotar B.V. The DigiNotar Root CA 4096 SHA1 M onday, arch M c 0 60 ed 44 cb d8 81 Netherla 3 2 1, 025 bd 0e f8 6c 0b a2 87 nds 10:19:21 AM dd cf 81 67 47 8c D-Trust GmbH German D-TRUST Root Class 2048 SHA1 Sunday, May 15, fd 1e d1 e2 02 1b 0b 9f y 3 CA 2007 2022 10:20:47 73 e8 eb 75 ce 23 43 PM 6b bc c7 46 eb D-TRUST Root Class 2048 SHA1 Sunday, May 15, 4a 05 8f df d7 61 db 21 2 CA 2007 2022 10:20:47 b0 c2 ee 48 57 9b e2 PM 7f 42 a4 da 1c D-TRUST Qualified 2048 SHA1 Friday, June 08, e3 d7 36 06 99 6c df ef Root CA 1 2007:PN 2012 4:47:46 AM 61 fa 04 c3 35 e9 8e a9 61 04 26 4a Page 10
- 11. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size E-Certchile Chile E-CERT ROOT CA 4096 SHA1 T uesday, c 1 82 11 32 8a 92 b3 S eptember 5, 0 b2 38 09 b9 b5 e2 74 2 028 11:39:41 0a 07 fb 12 eb 5e AM Echoworx Canada Echoworx Root CA2 2048 SHA1 Monday, October cb 65 82 64 ea 8c da 07, 2030 3:49:13 18 6e 17 52 fb 52 c3 AM 97 36 7e a3 87 be EDICOM Spain ACEDICOM Root 4096 SHA1 T hursday, pril A e0 b4 32 2e b2 f6 a5 1 2 3, 028 9:24:22 68 b6 54 53 84 48 18 AM 4a 50 36 87 43 84 e-Guven Elektronik Bilgi Guvenligi A.S. Turkey e-Guven Kok 2048 SHA1 W ednesday, d d e1 d2 a9 01 80 2e Elektronik Sertifika J anuary 4, 017 0 2 1d 87 5e 84 b3 80 7e Hizmet Saglayicisi 4:32:48 AM 4b b1 fd 99 41 34 Entrust Canada Entrust.net Client 2048 MD5 Friday, February cf 74 bf ff 9b 86 81 5b Certification 07, 2020 9:46:40 08 33 54 40 36 3e 87 Authority AM b6 b6 f0 bf 73 Entrust.net Secure 1024 SHA1 Saturday, May 25, 99 a6 9b e6 1a fe 88 Server Certification 2019 9:39:40 AM 6b 4d 2b 82 00 7c b8 Authority 54 fc 31 7e 15 39 Entrust.net 2048 SHA1 Tuesday, 80 1d 62 d0 7b 44 9d Certification December 24, 5c 5c 03 5c 98 ea 61 fa Authority (2048) 2019 11:20:51 44 3c 2a 58 fe AM Entrust.net Secure 1024 MD5 Tuesday, 89 39 57 6e 17 8d f7 Server Certification February 04, 05 78 0f cc 5e c8 4f 84 Authority 2020 10:50:00 f6 25 3a 48 93 AM Entrust Root 2048 SHA1 Friday, November b3 1e b1 b7 40 e3 6c Certification 27, 2026 1:53:42 84 02 da dc 37 d4 4d Authority PM f5 d4 67 49 52 f9 Entrust.net Client 1024 MD5 Saturday, October da 79 c1 71 11 50 c2 Certification 12, 2019 34 39 aa 2b 0b 0c 62 Authority 12:54:30 PM fd 55 b2 f9 f5 80 Page 11
- 12. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Entrust Root 2048 SHA256 S aturday, 8c f4 27 fd 79 0c Certification D ecember 7, 0 3a d1 66 06 8d Authority - G2 2 030 10:55:54 e8 1e 57 ef bb 93 AM 22 72 d4 Entrust.net 2048 SHA1 T uesday, uly 4, J 2 5 0 30 06 09 1d 97 d4 f5 Certification 2 029 6:15:12 AM ae 39 f7 cb e7 92 7d 7d Authority (2048) 65 2d 34 31 e-tugra Turkey EBG Elektronik 4096 SHA1 Saturday, August 8c 96 ba eb dd 2b 07 Sertifika Hizmet 13, 2016 5:31:09 07 48 ee 30 32 66 a0 Sağlayıcısı PM f3 98 6e 7c ae 58 GlobalSign UK GlobalSign Root CA 2048 SHA1 Friday, January b1 bc 96 8b d4 f4 9d 28, 2028 5:00:00 62 2a a8 9a 81 f2 15 AM 01 52 a4 1d 82 9c GlobalSign Root CA - 2048 SHA1 Wednesday, 75 e0 ab b6 13 85 12 R2 December 15, 27 1c 04 f8 5f dd de 38 2021 1:00:00 AM e4 b7 24 2e fe GlobalSign SGC CA 2048 SHA1 Tuesday, January e5 21 5d 34 60 c2 c2 28, 2014 0b be 2d 9f e5 fb 66 5d 12:00:00 AM aa 2c 0e 22 5c GoDaddy USA Go Daddy Class 2 2048 SHA1 Thursday, June 27 96 ba e6 3f 18 01 Certification 29, 2034 e2 77 26 1b a0 d7 77 Authority 10:06:20 AM 70 02 8f 20 ee e4 Starfield Class 2 2048 SHA1 Thursday, June ad 7e 1c 28 b0 64 ef 8f Certification 29, 2034 60 03 40 20 14 c3 d0 Authority 10:39:16 AM e3 37 0e b5 8a Starfield Services 2048 SHA1 M onday, 5 d 00 38 60 f0 02 ed Root Certificate D ecember 1, 3 82 9d ea a4 18 68 f7 Authority 2 029 3:59:59 PM 88 18 6d 62 12 7f ValiCert Class 2 1024 SHA1 Tuesday, June 25, 31 7a 2a d0 7f 2b 33 Policy Validation 2019 5:19:54 PM 5e f5 a1 c3 4e 4b 57 Authority e8 b7 d8 f1 fc a6 Government of Austria, Austria Telekom- Austria Telekom-Control- 2048 SHA1 Saturday, e7 07 15 f6 f7 28 36 5b Control Commission Kommission Top 1 September 24, 51 90 e2 71 de e4 c6 2005 5:40:00 AM 5e be ea ca f3 Page 12
- 13. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Government of Brazil, Autoridade Brazil Autoridade 2048 SHA1 Wednesday, 8e fd ca bc 93 e6 1e 92 Certificadora Raiz Brasileira Certificadora Raiz November 30, 5d 4d 1d ed 18 1a 43 Brasileira 2011 4:59:00 PM 20 a4 67 a1 39 Government of Brazil, Instituto Nacional de Brazil Autoridade 2048 SHA1 T hursday, uly J 7 0 5d 2b 45 65 c7 04 7a Tecnologia da Informação (ITI) Certificadora Raiz 2 2 9, 021 54 06 94 a7 9a f7 ab b8 Brasileira v1 11:17:10 AM 42 bd c1 61 Government of Finland, Population Register Finland VRK Govt Root CA 2048 SHA1 Monday, fa a7 d9 fb 31 b7 46 f2 Centre December 18, 00 a8 5e 65 79 76 13 2023 6:51:08 AM d8 16 e0 63 b5 Government of France France Secrétariat Général 2048 SHA1 Saturday, October 60 d6 89 74 b5 c2 65 de la Défense 17, 2020 7:29:22 9e 8a 0f c1 88 7c 88 d2 Nationale AM 46 69 1b 18 2c Government of Hong Kong (SAR), Hongkong Hong Hongkong Post Root 2048 SHA1 Sunday, May 14, d6 da a8 20 8d 09 d2 Post Kong CA 1 2023 9:52:29 PM 15 4d 24 b5 2f cb 34 (SAR) 6e b2 58 b2 8a 58 Hongkong Post Root 2048 SHA1 Saturday, January e0 92 5e 18 c7 76 5e CA 16, 2010 4:59:00 22 da bd 94 27 52 9d PM a6 af 4e 06 64 28 Government of India, Ministry of India CCA India 2007 2048 SHA1 F riday, uly 3, J 0 97 22 6a ae 4a 7a 64 Communications & Information Technology, 2 015 11:02:48 a5 9b d1 67 87 f2 7f 84 Controller of Certifying Authorities (CCA) PM 1c 0a 00 1f d0 Government of Japan, Ministry of Internal Japan Japan Local 2048 SHA1 Thursday, March 96 83 38 f1 13 e3 6a Affairs and Communications Government PKI 31, 2016 7:59:59 7b ab dd 08 f7 77 63 Application CA AM 91 a6 87 36 58 2e Government of Japan, Ministry of Internal Japan Application CA, 2048 SHA1 T uesday, 7 f 8a b0 cf d0 51 87 6a Affairs and Communications Japanese D ecember 2, 1 66 f3 36 0f 47 c8 8d 8c Government 2 017 8:00:00 AM d3 35 fc 74 Government of Korea, Korea Information South KISA RootCA 3 2048 SHA1 Tuesday, 5f 4e 1f cf 31 b7 91 3b Security Agency (KISA) Korea November 18, 85 0b 54 f6 e5 ff 50 1a 2014 11:39:51 2b 6f c6 cf PM KISA RootCA 1 2048 SHA1 Sunday, August 02 72 68 29 3e 5f 5d 24, 2025 1:05:46 17 aa a4 b3 c3 e6 36 AM 1e 1f 92 57 5e aa Page 13
- 14. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size CertRSA01 2048 SHA1 Wednesday, f5 c2 7c f5 ff f3 02 9a March 03, 2010 cf 1a 1a 4b ec 7e e1 96 7:59:59 AM 4c 77 d7 84 Government of Korea, Ministry of Government S Korea Root CA 2048 SHA1 Saturday, April 63 4c 3b 02 30 cf 1b Administration and Home Affairs (MOGAHA) 21, 2012 1:07:23 78 b4 56 9f ec f2 c0 4a AM 86 52 ef ef 0e GPKIRootCA 2048 SHA1 Tuesday, March 20 cb 59 4f b4 ed d8 14, 2017 95 76 3f d5 25 4e 95 10:00:04 PM 9a 66 74 c6 ee b2 Government of Latvia, Latvian Post Latvia VAS Latvijas Pasts 4096 SHA1 Friday, September 08 64 18 e9 06 ce e8 SSI (RCA) 13, 2024 2:27:57 9c 23 53 b6 e2 7f bd AM 9e 74 39 f7 63 16 Government of Latvia, Latvian State Radio & Latvia E-ME SSI (RCA) 4096 SHA1 W ednesday, ay M c9 32 1d e6 b5 a8 26 Television Centre (LVRTC) 1 2 9, 027 1:48:15 66 cf 69 71 a1 8a 56 f2 AM d3 a8 67 56 02 Government of Macao, Macao Post Macao Macao Post 2048 MD5 1 /29/2013 8 9 c3 2e 6b 52 4e 4d SAR eSignTrust Root 65 38 8b 9e ce dc 63 Certification 71 34 ed 41 93 a3 Authority Government of Mexico, Autoridad Mexico Secretaria de 2048 SHA1 W ednesday, ay M 34 d4 99 42 6f 9f c2 bb Certificadora Raiz de la Secretaria de Economia Mexico 0 2 7, 025 5:00:00 27 b0 75 ba b6 82 aa Economia PM e5 ef fc ba 74 Government of Portugal, Sistema de Portugal ECRaizEstado 4096 SHA1 S unday, une 3, J 2 3 9 13 85 3e 45 c4 39 a2 Certificação Electrónica do Estado (SCEE) / 2 030 6:41:27 AM da 71 8c df b6 f3 e0 33 e0 Electronic Certification System of the State 4f ee 71 Government of Serbia, PTT saobraćaja Serbia Posta CA Root 2048 SHA1 F riday, ctober O d6 bf 79 94 f4 2b e5 „Srbija” (Serbian Post) 2 2 0, 028 fa 29 da 0b d7 58 7b 5:52:08 AM 59 1f 47 a4 4f 22 Page 14
- 15. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Government of Slovenia, Posta Slovenije Slovenia POSTArCA 2048 SHA1 T uesday, b 1 ea c3 e5 b8 24 76 (POSTArCA) F ebruary 7, 0 e9 d5 0b 1e c6 7d 2c 2 023 4:06:58 AM c1 1e 12 e0 b4 91 Government of Slovenia, Slovenian General Slovenia SIGEN-CA 2048 SHA1 Tuesday, June 29, 3e 42 a1 87 06 bd 0c Certification Authority (SIGEN-CA) 2021 1:57:46 PM 9c cf 59 47 50 d2 e4 d6 ab 00 48 fd c4 Government of Slovenia, Slovenian Slovenia SIGOV-CA 2048 SHA1 Sunday, January 7f b9 e2 c9 95 c9 7a 93 Governmental Certification Authority (SIGOV- 10, 2021 6:22:52 9f 9e 81 a0 7a ea 9b CA) AM 4d 70 46 34 96 Government of Spain (CAV), Izenpe S.A. Spain Izenpe.com 2048 SHA1 Tuesday, January 4a 3f 8d 6b dc 0e 1e cf 30, 2018 4:00:00 cd 72 e3 77 de f2 d7 ff PM 92 c1 9b c7 Izenpe.com 4096 SHA1 S unday, 3 0 77 9e 93 15 02 2e D ecember 3, 1 94 85 6a 3f f8 bc f8 15 2 037 12:27:25 b0 82 f9 ae fd AM Government of Spain, Dirección General de la Spain DIRECCION GENERAL 4096 SHA1 Friday, February b3 8f ec ec 0b 14 8a a6 Policía – Ministerio del Interior – España. DE LA POLICIA 08, 2036 3:59:59 86 c3 d0 0f 01 ec c8 84 PM 8e 80 85 eb Government of Spain, Fábrica Nacional de Spain Fabrica Nacional de 1024 SHA1 Monday, March 43 f9 b1 10 d5 ba fd 48 Moneda y Timbre (FNMT) Moneda y Timbre 18, 2019 8:26:19 22 52 31 b0 d0 08 2b AM 37 2f ef 9a 54 AC RAIZ FNMT-RCM 4096 SHA1 M onday, b8 65 13 0b ed ca 38 d2 D ecember 1, 3 7f 69 92 94 20 77 0b ed 2 029 5:00:00 PM 86 ef bc 10 Government of Spain, Autoritat de Certificació Spain Root CA Generalitat 2048 SHA1 Thursday, July 01, a0 73 e5 c5 bd 43 61 de la Comunitat Valenciana (ACCV) Valenciana 2021 8:22:47 AM 0d 86 4c 21 13 0a 85 58 57 cc 9c ea 46 Government of Switzerland, Bundesamt für Switzerla AdminCA-CD-T01 2048 SHA1 M onday, anuary J 6 b 81 44 6a 5c dd f4 Informatik und Telekommunikation (BIT) nd 2 2 5, 016 5:36:19 74 a0 f8 00 ff be 69 fd AM 0d b6 28 75 16 Page 15
- 16. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Admin-Root-CA 2048 SHA1 W ednesday, 2 5 3f 77 5b 0e 77 97 N ovember 0, 1 ab 64 5f 15 91 55 97 2 021 12:51:07 c3 9e 26 36 31 d1 AM Government of Taiwan, Government Root Taiwan TW Government Root 4096 SHA1 Sunday, f4 8b 11 bf de ab be 94 Certification Authority (GRCA) ROC Certification December 05, 54 20 71 e6 41 de 6b Authority 2032 6:23:33 AM be 88 2b 40 b9 Government of The Netherlands, PKIoverheid The Staat der 2048 SHA1 Wednesday, 10 1d fa 3f d5 0b cb bb Netherla Nederlanden Root CA December 16, 9b b5 60 0c 19 55 a4 nds 2015 2:15:38 AM 1a f4 73 3a 04 Staat der 4096 SHA256 3 /5/2020 59 af 82 79 91 86 c7 Nederlanden Root CA b4 75 07 cb cf 03 57 - G2 46 eb 04 dd b7 16 Government of the United States of America, USA U.S. Government 2048 SHA1 Wednesday, 76 b7 60 96 dd 14 56 Federal PKI FBCA October 06, 2010 29 ac 75 85 d3 70 63 11:53:56 AM c1 bc 47 86 1c 8b Common Policy 2048 SHA1 1 0/15/2027 cb 44 a0 97 85 7c 45 fa 18 7e d9 52 08 6c b9 84 1f 2d 51 b5 Government of Tunisia, Agence National de Tunisia Agence Nationale de 2048 MD5 Wednesday, 30 70 f8 83 3e 4a a6 Certification Electronique / National Digital Certification August 12, 2037 80 3e 09 a6 46 ae 3f Certification Agency (ANCE/NDCA) Electronique 2:58:14 AM 7d 8a e1 fd 16 54 Agence Nationale de 2048 MD5 Wednesday, d9 04 08 0a 49 29 c8 Certification August 12, 2037 38 e9 f1 85 ec f7 a2 2d Electronique 2:03:17 AM ef 99 34 24 07 Government of Turkey, Kamu Sertifikasyon Turkey Kamu Sertifikasyon 2048 SHA1 Monday, August 1b 4b 39 61 26 27 6b Merkezi (Kamu SM) Merkezi 21, 2017 3:37:07 64 91 a2 68 6d d7 02 AM 43 21 2d 1f 1d 96 Government of Uruguay, Correo Uruguayo Uruguay Correo Uruguayo - 4096 SHA1 M onday, f9 dd 19 26 6b 20 43 f1 Root CA D ecember 0, 3 fe 4b 3d cb 01 90 af f1 2 030 7:59:59 PM 1f 31 a6 9d Halcom D.D. Slovenia Halcom CA FO 2048 SHA1 Friday, June 05, 04 09 56 5b 77 da 58 2020 2:33:31 AM 2e 64 95 ac 00 60 a7 23 54 e6 4b 01 92 Page 16
- 17. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size . Halcom CA PO 2 2048 SHA1 Thursday, 7f bb 6a cd 7e 0a b4 February 07, 38 da af 6f d5 02 10 d0 2019 10:33:31 07 c6 c0 82 9c AM I.CA První certifikační autorita, a.s. Czech I.CA Czech 2048 SHA1 S aturday, arch M 6 4 90 2a d7 27 7a f3 Republic Accredited 3 2 1, 018 5:00:00 e3 2c d8 cc 1d c7 9d Certification Services PM e1 fd 7f 80 69 ea I.CA Czech 2048 SHA1 S aturday, arch M a b 16 dd 14 4e cd c0 fc Certification Services 3 2 1, 018 5:00:00 4b aa b6 2e cf 04 08 PM 89 6f de 52 b7 IdenTrust USA DST (ABA.ECOM) CA 2048 SHA1 Thursday, July 09, 7a 74 41 0f b0 cd 5c 2009 10:33:53 97 2a 36 4b 71 bf 03 AM 1d 88 a6 51 0e 9e DST RootCA X2 2048 SHA1 Thursday, 67 eb 33 7b 68 4c eb November 27, 0e c2 b0 76 0a b4 88 2008 3:46:16 PM 27 8c dd 95 97 dd Xcert EZ by DST 2048 SHA1 Saturday, July 11, 68 ed 18 b3 09 cd 52 2009 9:14:18 AM 91 c0 d3 35 7c 1d 11 41 bf 88 38 66 b1 DST ACES CA X6 2048 SHA1 Monday, 40 54 da 6f 1c 3f 40 74 November 20, ac ed 0f ec cd db 79 d1 2017 2:19:58 PM 53 fb 90 1d DST (ANX Network) 1024 SHA1 Sunday, 76 39 c7 18 47 e1 51 CA December 09, b5 c7 ea 01 c7 58 fb f1 2018 9:16:48 AM 2a ba 29 8f 7a DSTCA E1 1024 SHA1 Monday, 81 96 8b 3a ef 1c dc 70 December 10, f5 fa 32 69 c2 92 a3 63 2018 11:40:23 5b d1 23 d3 AM DST (Baltimore EZ) 2048 SHA1 Friday, July 03, a3 e3 1e 20 b2 e4 6a CA 2009 12:56:53 32 85 20 47 2d 0c de PM 95 23 e7 26 0c 6d Page 17
- 18. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size DSTCA E2 1024 SHA1 Sunday, ab 48 f3 33 db 04 ab December 09, b9 c0 72 da 5b 0c c1 2018 12:47:26 d0 57 f0 36 9b 46 PM DST RootCA X1 2048 SHA1 Friday, November b7 2f ff 92 d2 ce 43 de 28, 2008 0a 8d 4c 54 8c 50 37 11:18:55 AM 26 a8 1e 2b 93 DST-Entrust GTI CA 1024 SHA1 Saturday, bc 92 19 dd c9 8e 14 bf December 08, 1a 78 1f 6e 28 0b 04 2018 5:32:24 PM c2 7f 90 27 12 DST (National Retail 2048 SHA1 Monday, cf de fe 10 2f da 05 bb Federation) RootCA December 08, e4 c7 8d 2e 44 23 58 2008 9:14:16 AM 90 05 b2 57 1d DST Root CA X3 2048 SHA1 Thursday, da c9 02 4f 54 d8 f6 df September 30, 94 93 5f b1 73 26 38 2021 7:01:15 AM ca 6a d7 7c 13 DST (United Parcel 2048 SHA1 Saturday, ec 0c 37 16 ea 9e df ad Service) RootCA December 06, d3 5d fb d5 56 08 e6 2008 5:25:46 PM 0a 05 d3 cb f3 Infonotary Plc Bulgaria Infonotary CSP Root 4096 SHA1 F riday, arch 6, M 0 0 4 46 c8 bb 9a 69 83 2 026 9:33:05 AM c9 5c 8a 2e 54 64 68 7c 11 15 aa b7 4a Internet Publishing Services s.l. (ipsCA) Spain IPS SERVIDORES 1024 MD5 Tuesday, 24 ba 6d 6c 8a 5b 58 December 29, 37 a4 8d b5 fa e9 19 2009 4:21:07 PM ea 67 5c 94 d2 17 ipsCA Global CA Root 2048 SHA1 T uesday, 3c 71 d7 0e 35 a5 da D ecember 5, 2 a8 b2 e3 81 2d c3 67 2 029 6:38:44 AM 74 17 f5 99 0d f3 i psCA Main CA Root 2048 SHA1 T uesday, cf e4 31 3d ba 05 b8 D ecember 5, 2 a7 c3 00 63 99 5a 9e 2 029 6:54:36 AM b7 c2 47 ad 8f d5 Japan Certification Services, Inc. (JCSI) Japan Japan Certification 2048 SHA1 Tuesday, 00 ea 52 2c 8a 9c 06 Services, Inc. September 15, aa 3e cc e0 b4 fa 6c dc SecureSign RootCA2 2020 7:59:59 AM 21 d9 2e 80 99 Page 18
- 19. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size SecureSign RootCA3 2048 SHA1 Tuesday, 8e b0 3f c3 cf 7b b2 92 September 15, 86 62 68 b7 51 22 3d 2020 7:59:59 AM b5 10 34 05 cb SecureSign RootCA1 2048 SHA1 Tuesday, ca bb 51 67 24 00 58 September 15, 8e 64 19 f1 d4 08 78 2020 7:59:59 AM d0 40 3a a2 02 64 SecureSign SHA-1 2048 S aturday, pril A 3b c4 9f 48 f8 f3 73 a0 RootCA11 0 2 7, 029 9:56:47 9c 1e bd f8 5b b1 c3 65 PM c7 d8 11 b3 KEYNECTSIS France CertPlus Class 1 2048 SHA1 Monday, July 06, 6a 17 45 70 a9 16 fb Primary CA 2020 4:59:59 PM e8 44 53 ee d3 d0 70 a1 d8 da 44 28 29 CertPlus Class 3P 2048 SHA1 Saturday, July 06, 21 6b 2a 29 e6 2a 00 Primary CA 2019 4:59:59 PM ce 82 01 46 d8 24 41 41 b9 25 11 b2 79 CertPlus Class 2 2048 SHA1 Saturday, July 06, 74 20 74 41 72 9c dd Primary CA 2019 4:59:59 PM 92 ec 79 31 d8 23 10 8d c2 81 92 e2 bb Class 3 Primary CA 2048 SHA1 Saturday, July 06, d2 ed f8 8b 41 b6 fe 01 2019 4:59:59 PM 46 1d 6e 28 34 ec 7c 8f 6c 77 72 1e CertPlus Class 3TS 2048 SHA1 Saturday, July 06, f4 40 95 c2 38 ac 73 fc Primary CA 2019 4:59:59 PM 4f 77 bf 8f 98 df 70 f8 f0 91 bc 52 Microsec e-Szignó CA Hungary Microsec e-Szigno 2048 SHA1 Thursday, April 23 88 c9 d3 71 cc 9e Root CA 06, 2017 5:28:44 96 3d ff 7d 3c a7 ce fc AM d6 25 ec 19 0d Microsec e-Szigno 2048 SHA256 S unday, a6 5c b4 73 3d Root CA 2009 D ecember 0, 3 94 a5 c8 65 a8 2 029 4:30:18 AM 64 64 7c 2c 01 27 2c 89 b1 43 Page 19
- 20. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Microsoft Corporation USA Microsoft 2048 MD5 Friday, December 7f 88 cd 72 23 f3 c8 13 Authenticode(tm) 31, 1999 4:59:59 81 8c 99 46 14 a8 9c Root Authority PM 99 fa 3b 52 47 Microsoft Root 2048 MD5 Thursday, a4 34 89 15 9a 52 0f Authority December 31, 0d 93 d0 32 cc af 37 e7 2020 12:00:00 fe 20 a8 b4 19 AM Microsoft Root 4096 SHA1 Sunday, May 09, cd d4 ee ae 60 00 ac 7f Certificate Authority 2021 4:28:13 PM 40 c3 80 2c 17 1e 30 14 80 30 c0 72 Microsoft Time 1024 MD5 Thursday, 24 5c 97 df 75 14 e7 cf Stamping Service December 30, 2d f8 be 72 ae 95 7b Root 1999 4:59:59 PM 9e 04 74 1e 85 NetLock Ltd. Hungary NetLock Uzleti (Class 1024 MD5 Wednesday, 87 9f 4b ee 05 df 98 58 B) Tanusitvanykiado February 20, 3b e3 60 d6 33 e7 0d 2019 7:10:22 AM 3f fe 98 71 af NetLock Minositett 2048 SHA1 Wednesday, 01 68 97 e1 a0 b8 f2 Kozjegyzoi (Class December 14, c3 b1 34 66 5c 20 a7 QA) Tanusitvanykiad 2022 6:47:11 PM 27 b7 a1 58 e2 8f NetLock Kozjegyzoi 2048 MD5 Tuesday, ac ed 5f 65 53 fd 25 ce (Class A) February 19, 01 5f 1f 7a 48 3b 6a 74 Tanusitvanykiado 2019 4:14:47 PM 9f 61 78 c6 NetLock Expressz 1024 MD5 Wednesday, e3 92 51 2f 0a cf f5 05 (Class C) February 20, df f6 de 06 7f 75 37 e1 Tanusitvanykiado 2019 7:08:11 AM 65 ea 57 4b NetLock Arany (Class 2048 SHA256 1 2/6/2028 06 08 3f 59 3f 15 a1 04 Gold) Főtanúsítvány a0 69 a4 6b a9 03 d0 06 b7 97 09 91 NetLock Platina 4096 SHA256 1 2/6/2028 ec 93 de 08 3c 93 d9 (Class Platinum) 33 a9 86 b3 d5 cd e2 Főtanúsítvány 5a cb 2f ee cf 8e Netrust Pte Ltd Singapor Netrust CA1 2048 SHA1 M onday, arch M 5 5 c8 6f 74 14 ac 8b dd e 2 2 9, 021 7:57:45 68 14 f4 d8 6a f1 5f 37 PM 10 e1 04 d0 Page 20
- 21. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Network Solutions USA Network Solutions 2048 SHA1 Monday, 74 f8 a3 c3 ef e7 b3 90 Certificate Authority December 31, 06 4b 83 90 3c 21 64 2029 4:59:59 PM 60 20 e5 df ce UTN-USERFirst- 2048 SHA1 Tuesday, July 09, 04 83 ed 33 99 ac 36 Hardware 2019 11:19:22 08 05 87 22 ed bc 5e AM 46 00 e3 be f9 d7 Nova Ljubljanska Banka d.d. (NLB) Slovenia NLB Nova 2048 SHA1 Monday, May 15, 04 56 f2 3d 1e 9c 43 Ljubljanska Banka 2023 4:22:45 AM ae cb 0d 80 7f 1c 06 47 d.d. Ljubljana 55 1a 05 f4 56 Post.Trust Ireland Post.Trust Root CA 2048 SHA1 T uesday, uly 5, J 0 c 4 67 4d dc 6c e2 96 7f 2 022 1:12:33 AM f9 c9 2e 07 2e f8 e8 a7 fb d6 a1 31 Post.Trust Root CA 2048 SHA1 Friday, August 20, bc 7b 3c 6f ef 26 b9 f7 2010 6:56:21 AM ab 10 d7 a1 f6 b6 7c 5e d2 a1 2d 3d QuoVadis Bermuda QuoVadis Root CA 3 4096 SHA1 Monday, 1f 49 14 f7 d8 74 95 1d November 24, dd ae 02 c0 be fd 3a 2d 2031 12:06:44 82 75 51 85 PM QuoVadis Root CA 2 4096 SHA1 Monday, ca 3a fb cf 12 40 36 4b November 24, 44 b2 16 20 88 80 48 2031 11:23:33 39 19 93 7c f7 AM QuoVadis Root 2048 SHA1 Wednesday, de 3f 40 bd 50 93 d3 Certification March 17, 2021 9b 6c 60 f6 da bc 07 62 Authority 11:33:33 AM 01 00 89 76 c9 Red Abogacía Spain Autoridad de 2048 SHA1 Thursday, June 7f 8a 77 83 6b dc 6d Certificacion de la 13, 2030 3:00:00 06 8f 8b 07 37 fc c5 72 Abogacia PM 54 13 06 8c a4 RSA Security USA RSA Security 2048 2048 SHA1 Sunday, February 25 01 90 19 cf fb d9 99 V3 22, 2026 1:39:23 1c b7 68 25 74 8d 94 PM 5f 30 93 95 42 Page 21
- 22. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size ValiCert Class 3 1024 SHA1 Tuesday, June 25, 69 bd 8c f4 9c d3 00 fb Policy Validation 2019 5:22:33 PM 59 2e 17 93 ca 55 6a Authority f3 ec aa 35 fb SECOM Trust Systems Co. Ltd. Japan Security 2048 SHA1 Friday, June 05, fe b8 c4 32 dc f9 76 9a Communication EV 2037 7:12:32 PM ce ae 3d d8 90 8f fd 28 RootCA1 86 65 64 7d Security 2048 SHA1 Friday, September 36 b1 2b 49 f9 81 9e Communication 29, 2023 9:20:49 d7 4c 9e bc 38 0f c6 56 RootCA1 PM 8f 5d ac b2 f7 ValiCert Class 1 1024 SHA1 Tuesday, June 25, e5 df 74 3c b6 01 c4 9b Policy Validation 2019 3:23:48 PM 98 43 dc ab 8c e8 6a Authority 81 10 9f e4 8e Security 2048 SHA256 M onday, ay 8, M 2 5f 3b 8c f2 f8 10 b3 7d Communication 2 029 9:00:39 PM 78 b4 ce ec 19 19 c3 RootCA2 73 34 b9 c7 74 Serasa Brazil Serasa Certificate 2048 SHA1 Thursday, 9e d1 80 28 fb 1e 8a Authority III November 21, 97 01 48 0a 78 90 a5 2024 6:24:14 AM 9a cd 73 df f8 71 Serasa Certificate 2048 SHA1 Thursday, 31 e2 c5 2c e1 08 9b ef Authority II November 21, fd da db 26 dd 7c 78 2024 5:44:48 AM 2e bc 40 37 bd Serasa Certificate 2048 SHA1 Thursday, a7 f8 39 0b a5 77 05 Authority I November 21, 09 6f d3 69 41 d4 2e 2024 7:12:45 AM 71 98 c6 d4 d9 d5 Shanghai Electronic Certification Authority Co. China UCA Global Root 4096 SHA1 W ednesday, 0 b 97 2c 9e a6 e7 cc Ltd. (SHECA) D ecember 0, 3 58 d9 3b 20 bf 71 ec 2 037 4:00:00 PM 41 2e 72 09 fa bf UCA Root 2048 SHA1 S unday, 8 2 50 be d5 a2 14 43 D ecember 0, 3 3a 66 37 7c bc 10 ef 83 2 029 4:00:00 PM f6 69 da 3a 67 Skaitmeninio sertifikavimo centras (SSC) Lithuani SSC Root CA C 4096 SHA1 Tuesday, 23 e8 33 23 3e 7d 0c a December 22, c9 2b 7c 42 79 ac 19 2026 5:11:30 AM c2 f4 74 d6 04 ca Page 22
- 23. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size SSC Root CA B 4096 SHA1 Friday, December 3e 84 d3 bc c5 44 c0 f6 25, 2026 5:08:26 fa 19 43 5c 85 1f 3f 2f AM cb a8 e8 14 SSC Root CA A 4096 SHA1 Monday, 5a 5a 4d af 78 61 26 December 28, 7c 4b 1f 1e 67 58 6b 2026 5:05:04 AM ae 6e d4 fe b9 3f Start Commercial (StartCom) Israel StartCom 4096 SHA1 W ednesday, 3e 2b f7 f2 03 1b 96 f3 Ltd. Certification S eptember 7, 1 8c e6 c4 d8 a8 5d 3e Authority 2 036 12:46:36 2d 58 47 6a 0f P S-TRUST German S-TRUST 2048 SHA1 Friday, June 21, be b5 a9 95 74 6b 9e y Authentication and 2030 4:59:59 PM df 73 8b 56 e6 df 43 7a Encryption Root CA 77 be 10 6b 81 2005:PN Swisscom Solutions AG Switzerla Swisscom Root CA 1 4096 SHA1 Monday, August 5f 3a fc 0a 8b 64 f6 86 nd 18, 2025 3:06:20 67 34 74 df 7e a9 a2 fe PM f9 fa 7a 51 SwissSign AG Switzerla SwissSign Silver CA - 4096 SHA1 Saturday, October 9b aa e5 9f 56 ee 21 cb nd G2 25, 2036 1:32:46 43 5a be 25 93 df a7 f0 AM 40 d1 1d cb SwissSign Platinum 4096 SHA1 Saturday, October 56 e0 fa c0 3b 8f 18 23 CA - G2 25, 2036 1:36:00 55 18 e5 d3 11 ca e8 AM c2 43 31 ab 66 SwissSign Gold CA - 4096 SHA1 Saturday, October d8 c5 38 8a b7 30 1b G2 25, 2036 1:30:35 1b 6e d4 7a e6 45 25 AM 3a 6f 9f 1a 27 61 Taiwan-CA Inc. (TWCA) Taiwan TWCA Root 2048 SHA1 T uesday, cf 9e 87 6d d3 eb fc 42 26 97 Certification D ecember 1, 3 a3 b5 a3 7a a0 76 a9 06 23 Authority 1 2 030 8:59:59 AM 48 TWCA Root 4096 SHA256 T uesday, df 64 6d cb 7b 0f d3 a9 6a ee Certification D ecember 1, 3 88 c6 4e 2d 67 67 11 ff 9d 5f Authority 2 2 030 8:59:59 AM Page 23
- 24. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size TeliaSonera Finland Sonera Class2 CA 2048 SHA1 Tuesday, April 06, 37 f7 6d e6 07 7c 90 c5 b1 2021 12:29:40 3e 93 1a b7 41 10 b4 f2 e4 AM 9a 27 Sonera Class1 CA 2048 SHA1 Tuesday, April 06, 07 47 22 01 99 ce 74 b9 7c 2021 3:49:13 AM b0 3d 79 b2 64 a2 c8 55 e9 33 ff TrustCenter ( a company of Germany TC TrustCenter Universal 2048 SHA1 Wednesday, 6b 2f 34 ad 89 58 be 62 fd Chosen Security) CA I December 31, b0 6b 5c ce bb 9d d9 4f 4e 2025 3:59:59 PM 39 f3 TC TrustCenter Universal 2048 SHA1 Tuesday, 8c c4 30 7b c6 07 55 e7 b2 CA II December 31, 2d d9 f7 fe a2 45 93 6c 7c 2030 3:59:59 PM f2 88 TC TrustCenter Class 3 1024 MD5 Saturday, January 9f c7 96 e8 f8 52 4f 86 3a CA 01, 2011 4:59:59 e1 49 6d 38 12 42 10 5f 1b AM 78 f5 TC TrustCenter Class 1 1024 MD5 Saturday, January 72 0f c1 5d dc 27 d4 56 d0 CA 01, 2011 4:59:59 98 fa bf 3c dd 78 d3 1e f5 AM a8 da TC TrustCenter Class 2 1024 MD5 Saturday, January 83 8e 30 f7 7f dd 14 aa 38 CA 01, 2011 4:59:59 5e d1 45 00 9c 0e 22 36 49 AM 4f aa TC TrustCenter Class 3 2048 SHA1 Wednesday, 80 25 ef f4 6e 70 c8 d4 72 CA II December 31, 24 65 84 fe 40 3b 8a 8d 6a 2025 3:59:59 PM db f5 TC TrustCenter Class 4 2048 SHA1 Wednesday, a6 9a 91 fd 05 7f 13 6a 42 CA II December 31, 63 0b b1 76 0d 2d 51 12 0c 2025 3:59:59 PM 16 50 TC TrustCenter Time 1024 MD5 Saturday, January a3 99 f7 6f 0c bf 4c 9d a5 5e Stamping CA 01, 2011 4:59:59 4a c2 4e 89 60 98 4b 29 05 AM b6 TC TrustCenter Class 2 2048 SHA1 Wednesday, ae 50 83 ed 7c f4 5c bc 8f CA II December 31, 61 c6 21 fe 68 5d 79 42 21 2025 3:59:59 PM 15 6e Page 24
- 25. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size TC TrustCenter Class 4 1024 MD5 Saturday, January d2 9f 6c 98 be fc 6d 98 65 CA 01, 2011 4:59:59 21 54 3e e8 be 56 ce bc 28 AM 8c f3 Trustis Limited United Kingdom Trustis FPS Root CA 2048 SHA1 Sunday, January 3b c0 38 0b 33 c3 f6 a6 0c 21, 2024 4:36:54 86 15 22 93 d9 df f5 4b 81 AM c0 04 Trustis EVS Root CA 2048 SHA1 Saturday, January ed 8d c8 38 6c 48 86 ae ee 09, 2027 4:56:00 07 91 58 aa c3 bf e6 58 e3 AM 94 b4 Trustwave USA Secure Global CA 2048 SHA1 Monday, 3a 44 73 5a e5 81 90 1f 24 December 31, 86 61 46 1e 3b 9c c4 5f f5 2029 12:52:06 3a 1b PM SecureTrust CA 2048 SHA1 Monday, 87 82 c6 c3 04 35 3b cf d2 December 31, 96 92 d2 59 3e 7d 44 d9 34 2029 12:40:55 ff 11 PM XRamp Global 2048 SHA1 Sunday, b8 01 86 d1 eb 9c 86 a5 41 Certification Authority December 31, 04 cf 30 54 f3 4c 52 b7 e5 2034 10:37:19 58 c6 PM TurkTrust Turkey TÜRKTRUST Bilgi İletişim 2048 SHA1 Sunday, March 79 98 a3 08 e1 4d 65 85 e6 ve Bilişim Güvenliği 22, 2015 3:27:17 c2 1e 15 3a 71 9f ba 5a d3 Hizmetleri A.Ş. AM 4a d9 TURKTRUST Elektronik 2048 SHA1 Sunday, March 75 02 51 b2 c6 32 53 6f 9d Islem Hizmetleri 22, 2015 3:04:51 91 72 79 54 3c 13 7c d7 21 AM c6 e0 TURKTRUST Elektronik 2048 SHA1 Wednesday, b4 35 d4 e1 11 9d 1c 66 90 Sertifika Hizmet September 16, a7 49 eb b3 94 bd 63 7b a7 Saglayicisi 2015 3:07:57 AM 82 b7 TURKTRUST Elektronik 2048 SHA1 Wednesday, c0 db 57 81 57 e9 ee 82 b5 Islem Hizmetleri September 16, 91 7d f0 dd 6d 82 ee 90 39 2015 5:13:05 AM c4 e2 Page 25
- 26. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size TÜRKTRUST Elektronik 2048 SHA1 F riday, ecember D f 1 7f 6f b6 31 dc 99 e3 a3 Sertifika Hizmet 2 2 2, 017 c8 7f fe 1c f1 81 10 88 d9 Sağlayıcısı 10:37:19 AM 60 33 Unizeto Certum Poland Certum CA 2048 SHA1 Friday, June 11, 62 52 dc 40 f7 11 43 a2 2f 2027 3:46:39 AM de 9e f7 34 8e 06 42 51 b1 81 18 Certum Trusted Network 2048 SHA1 M onday, 07 e0 32 e0 20 b7 2c 3f 19 CA D ecember 1, 3 2f 06 28 a2 59 3a 19 a7 0f 2 029 5:07:37 AM 06 9e VeriSign USA Equifax Secure 1024 SHA1 Wednesday, d2 32 09 ad 23 d3 14 23 21 Certificate Authority August 22, 2018 74 e4 0d 7f 9d 62 13 97 86 9:41:51 AM 63 3a Equifax Secure 1024 MD5 Saturday, June da 40 18 8b 91 89 a3 ed ee eBusiness CA-1 20, 2020 9:00:00 ae da 97 fe 2f 9d f5 b7 d1 PM 8a 41 Primary Utility Root CA 2048 MD5 Wednesday, May 6a 6f 2a 8b 6e 26 15 08 8d 23, 2012 4:59:59 f5 9c d2 4c 40 24 18 ae 42 PM a3 f1 eSign Imperito Primary 2048 MD5 Wednesday, May 70 30 aa bf 84 32 a8 00 66 Root CA 23, 2012 4:59:59 6c cc c4 2a 88 7e 42 b7 55 PM 3e 2b eSign Australia: 2048 MD5 Friday, May 23, c7 30 26 e3 25 fe 21 91 6b Gatekeeper Root CA 2014 4:59:59 PM 55 c4 b5 3a 56 b1 3d ca f3 d6 25 Equifax Secure Global 1024 MD5 Saturday, June 7e 78 4a 10 1c 82 65 cc 2d eBusiness CA-1 20, 2020 9:00:00 e1 f1 6d 47 b4 40 ca d9 0a PM 19 45 Equifax Secure 1024 SHA1 Sunday, June 23, 39 4f f6 85 0b 06 be 52 e5 eBusiness CA-2 2019 5:14:45 AM 18 56 cc 10 e1 80 e8 82 b3 85 cc GeoTrust Primary 2048 SHA1 Wednesday, July 32 3c 11 8e 1b f7 b8 b6 52 Certification Authority 16, 2036 4:59:59 54 e2 e2 10 0d d6 02 90 37 PM f0 96 Page 26
- 27. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size GeoTrust Universal CA 2 4096 SHA1 Saturday, March 37 9a 19 7b 41 85 45 35 0c 03, 2029 a6 03 69 f3 3c 2e af 47 4f 10:00:00 PM 20 79 GeoTrust Global CA 2 2048 SHA1 Sunday, March a9 e9 78 08 14 37 58 88 f2 03, 2019 05 19 b0 6d 2b 0d 2b 60 16 10:00:00 PM 90 7d GeoTrust Global CA 2048 SHA1 Friday, May 20, de 28 f4 a4 ff e5 b9 2f a3 c5 2022 9:00:00 PM 03 d1 a3 49 a7 f9 96 2a 82 12 GeoTrust Universal CA 4096 SHA1 Saturday, March e6 21 f3 35 43 79 05 9a 4b 03, 2029 68 30 9d 8a 2f 74 22 15 87 10:00:00 PM ec 79 Thawte Server CA 1024 MD5 Thursday, 23 e5 94 94 51 95 f2 41 48 December 31, 03 b4 d5 64 d2 a3 a3 f5 d8 2020 4:59:59 PM 8b 8c Thawte Personal Basic 1024 MD5 Thursday, 40 e7 8c 1d 52 3d 1c d9 95 CA December 31, 4f ac 1a 1a b3 bd 3c ba a1 2020 4:59:59 PM 5b fc Thawte Primary Root CA 2048 SHA1 Wednesday, July 91 c6 d6 ee 3e 8a c8 63 84 16, 2036 4:59:59 e5 48 c2 99 29 5c 75 6c 81 PM 7b 81 Thawte Premium Server 1024 MD5 Thursday, 62 7f 8d 78 27 65 63 99 d2 CA December 31, 7d 7f 90 44 c9 fe b3 f3 3e fa 2020 4:59:59 PM 9a Thawte Personal 1024 MD5 Thursday, 20 99 00 b6 3d 95 57 28 14 Freemail CA December 31, 0c d1 36 22 d8 c6 87 a4 eb 2020 4:59:59 PM 00 85 Thawte Personal 1024 MD5 Thursday, 36 86 35 63 fd 51 28 c7 be Premium CA December 31, a6 f0 05 cf e9 b4 36 68 08 2020 4:59:59 PM 6c ce Thawte Timestamping 1024 MD5 Thursday, be 36 a4 56 2f b2 ee 05 db CA December 31, b3 d3 23 23 ad f4 45 08 4e 2020 4:59:59 PM d6 56 Page 27
- 28. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size UTN-USERFirst-Network 2048 SHA1 Tuesday, July 09, 5d 98 9c db 15 96 11 36 51 Applications 2019 11:57:49 65 64 1b 56 0f db ea 2a c2 AM 3e f1 Secure Server 1000 MD2 Thursday, January 44 63 c5 31 d7 cc c1 00 67 Certification Authority 07, 2010 4:59:59 94 61 2b b6 56 d3 bf 82 57 PM 84 6f CA 1024 SHA1 Tuesday, August 0b 77 be bb cb 7a a2 47 05 01, 2028 4:59:59 de cc 0f bd 6a 02 fc 7a bd PM 9b 52 VeriSign Trust Network 1024 SHA1 Friday, May 18, 3f 85 f2 bb 4a 62 b0 b5 8b (G2) 2018 4:59:59 PM e1 61 4a bb 0d 46 31 b4 be f8 ba VeriSign Class 3 Public 2048 SHA1 Wednesday, July 4e b6 d5 78 49 9b 1c cf 5f Primary Certification 16, 2036 4:59:59 58 1e ad 56 be 3d 9b 67 44 Authority - G5 PM a5 e5 Class 3 Public Primary 1024 MD2 Wednesday, 4f 65 56 63 36 db 65 98 58 Certification Authority January 07, 2004 1d 58 4a 59 6c 87 93 4d 5f 4:59:59 PM 2a b4 VeriSign Time Stamping 1024 MD5 Wednesday, 18 f7 c1 fc c3 09 02 03 fd 5b Service Root January 07, 2004 aa 2f 86 1a 75 49 76 c8 dd 4:59:59 PM 25 VeriSign Commercial 1024 MD2 Wednesday, 24 a4 0a 1f 57 36 43 a6 7f Software Publishers CA January 07, 2004 0a 4b 07 49 f6 a2 2b f2 8a 4:59:59 PM bb 6b VeriSign Class 2 Public 2048 SHA1 Wednesday, July 61 ef 43 d7 7f ca d4 61 51 Primary Certification 16, 2036 4:59:59 bc 98 e0 c3 59 12 af 9f eb Authority - G3 PM 63 11 Class 1 Public Primary 1024 MD2 Tuesday, January 78 e9 dd 06 50 62 4d b9 cb Certification Authority 07, 2020 4:59:59 36 b5 07 67 f2 09 b8 43 be PM 15 b3 Class 1 Public Primary 1024 MD2 Tuesday, August 90 ae a2 69 85 ff 14 80 4c Certification Authority 01, 2028 4:59:59 43 49 52 ec e9 60 84 77 af PM 55 6f Page 28
- 29. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Class 3 Public Primary 1024 SHA1 Friday, May 18, 97 e2 e9 96 36 a5 47 55 4f Certification Authority - 2018 4:59:59 PM 83 8f ba 38 b8 2e 74 f8 9a G2 83 0a VeriSign Class 3 Public 2048 SHA1 Wednesday, July 13 2d 0d 45 53 4b 69 97 cd Primary Certification 16, 2036 4:59:59 b2 d5 c3 39 e2 55 76 60 9b Authority - G3 PM 5c c6 Class 1 Public Primary 1024 SHA1 Tuesday, August 27 3e e1 24 57 fd c4 f9 0c Certification Authority - 01, 2028 4:59:59 55 e8 2b 56 16 7f 62 f5 32 G2 PM e5 47 VeriSign Commercial 1024 MD2 Friday, December 68 8b 6e b8 07 e8 ed a5 c7 Software Publishers CA 31, 1999 2:35:58 b1 7c 43 93 d0 79 5f 0f ae AM 15 5f Class 3 Public Primary 1024 MD2 Tuesday, August 74 2c 31 92 e6 07 e4 24 eb Certification Authority 01, 2028 4:59:59 45 49 54 2b e1 bb c5 3e 61 PM 74 e2 Class 2 Public Primary 1024 MD2 Tuesday, August 67 82 aa e0 ed ee e2 1a 58 Certification Authority 01, 2028 4:59:59 39 d3 c0 cd 14 68 0a 4f 60 PM 14 2a Class 3 Public Primary 1024 SHA1 Tuesday, August 85 37 1c a6 e5 50 14 3d ce Certification Authority - 01, 2028 4:59:59 28 03 47 1b de 3a 09 e8 f8 G2 PM 77 0f VeriSign Individual 1024 MD2 Wednesday, 96 97 4c d6 b6 63 a7 18 45 Software Publishers CA January 07, 2004 26 b1 d6 48 ad 81 5c f5 1e 4:59:59 PM 80 1a VeriSign Class 1 Public 2048 SHA1 Wednesday, July 20 42 85 dc f7 eb 76 41 95 Primary Certification 16, 2036 4:59:59 57 8e 13 6b d4 b7 d1 e9 8e Authority - G3 PM 46 a5 Class 1 Public Primary 1024 SHA1 Friday, May 18, 04 98 11 05 6a fe 9f d0 f5 Certification Authority - 2018 4:59:59 PM be 01 68 5a ac e6 a5 d1 c4 G2 45 4c Class 2 Public Primary 1024 MD2 Wednesday, a5 ec 73 d4 8c 34 fc be f1 Certification Authority January 07, 2004 00 5a eb 85 84 35 24 bb fa 4:59:59 PM b7 27 Page 29
- 30. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size Class 2 Public Primary 1024 SHA1 Tuesday, August b3 ea c4 47 76 c9 c8 1c ea Certification Authority - 01, 2028 4:59:59 f2 9d 95 b6 cc a0 08 1b 67 G2 PM ec 9d VeriSign Individual 1024 MD2 Friday, December b1 9d d0 96 dc d4 e3 e0 fd Software Publishers CA 31, 1999 2:37:48 67 68 85 50 5a 67 2c 43 8d AM 4e 9c VeriSign Class 4 Public 2048 SHA1 Wednesday, July c8 ec 8c 87 92 69 cb 4b ab Primary Certification 16, 2036 4:59:59 39 e9 8d 7e 57 67 f3 14 95 Authority - G3 PM 73 9d Class 2 Public Primary 1024 SHA1 Friday, May 18, cf f3 60 f5 24 cb 20 f1 fe ad Certification Authority - 2018 4:59:59 PM 89 00 6f 7f 58 6a 28 5b 2d G2 5b VeriSign Universal Root 2048 SHA2 uesday, T 36 79 ca 35 66 87 72 30 4d Certification Authority 56 D ecember 1, 0 30 a5 fb 87 3b 0f a7 7b b7 2 037 4:59:59 PM 0d 54 thawte Primary Root CA - 2048 SHA2 uesday, T f1 8b 53 8d 1b e9 03 b6 a6 G3 56 D ecember 1, 0 f0 56 43 5b 17 15 89 ca f3 2 037 4:59:59 PM 6b f2 GeoTrust Primary 2048 SHA2 Tuesday, 03 9e ed b8 0b e7 a0 3c 69 Certification Authority - 56 D ecember 1, 0 53 89 3b 20 d2 d9 32 3a 4c G3 2 037 4:59:59 PM 2a fd VeriSign Class 3 Public ECDSA SHA3 onday, anuary M J 22 d5 d8 df 8f 02 31 d1 8d Primary Certification 84 1 2 8, 038 4:59:59 f7 9d b7 cf 8a 2d 64 c9 3f Authority - G4 PM 6c 3a thawte Primary Root CA ECDSA SHA3 M onday, anuary J aa db bc 22 23 8f c4 01 a1 - G2 84 1 2 8, 038 4:59:59 27 bb 38 dd f4 1d db 08 9e PM f0 12 Page 30
- 31. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size GeoTrust Primary ECC384 ECDS onday, anuary M J 8d 17 84 d5 37 f3 03 7d ec Certification A 1 2 8, 038 4:59:59 70 fe 57 8b 51 9a 99 e6 10 Authority - G2 PM d7 b0 Verizon Business USA Baltimore CyberTrust 2048 SHA1 Monday, May 12, d4 de 20 d0 5e 66 fc 53 fe 1a Root 2025 4:59:00 PM 50 88 2c 78 db 28 52 ca e4 74 SecureNet CA Class B 2048 MD5 Friday, October 7a c5 ff f8 dc bc 55 83 17 68 16, 2009 2:59:00 77 07 3b f7 51 73 5e 9b d3 AM 58 Cybertrust Global Root 2048 SHA1 Wednesday, 5f 43 e5 b1 bf f8 78 8c ac 1c December 15, c7 ca 4a 9a c6 22 2b cc 34 c6 2021 1:00:00 AM GTE CyberTrust Root 1024 MD5 Thursday, 90 de de 9e 4c 4e 9f 6f d8 86 February 23, 17 57 9d d3 91 bc 65 a6 89 2006 4:59:00 PM 64 GTE CyberTrust Global 1024 MD5 Monday, August 97 81 79 50 d8 1c 96 70 cc Root 13, 2018 4:59:00 34 d8 09 cf 79 44 31 36 7e f4 PM 74 GTE CyberTrust Root 1024 MD5 Saturday, April db ac 3c 7a a4 25 4d a1 aa 5c 03, 2004 4:59:00 aa d6 84 68 cb 88 ee dd ee PM a8 Visa USA Visa eCommerce Root 2048 SHA1 Thursday, June 70 17 9b 86 8c 00 a4 fa 60 23, 2022 5:16:12 91 52 22 3f 9f 3e 32 bd e0 05 PM 62 Visa Information 2048 SHA1 Sunday, June 29, 5a 4d 0e 8b 5f dc fd f6 4e 72 Delivery Root CA 2025 10:42:42 99 a3 6c 06 0d b2 22 ca 78 AM e4 Wells Fargo Bank N.A. USA Wells Fargo Root 2048 SHA1 Thursday, January 93 e6 ab 22 03 03 b5 23 28 Certificate Authority 14, 2021 9:41:28 dc da 56 9e ba e4 d1 d1 cc fb AM 65 WellsSecure Public Root 2048 SHA1 Tuesday, e7 b4 f6 9d 61 ec 90 69 db CA December 13, 7e 90 a7 40 1a 3c f4 7d 4f e8 2022 4:07:54 PM ee Page 31
- 32. Current CA Owner Country CA Root Name CA Signature CA Root Expires Thumbprint Root Hash Size WISeKey Switzerla OISTE WISeKey Global 2048 SHA1 Friday, December 59 22 a1 e1 5a ea 16 35 21 nd Root GA CA 11, 2037 9:09:51 f8 98 39 6a 46 46 b0 44 1b 0f AM a9 EXPLANATION OF TERMS Current CA Owner indicates the Certification Authority who currently operates the CA Root Name with the unique Thumbprint and CA Root expiration date indicated. Over time CA root certificates have changed hands, and this resource attempts to identify the current CA owner for each identified root certificate. Each Current CA owner should contain a hyperlink to the CA’s website, where you can obtain additional information about their root certificates and their certificate policies. Country is the main country from which the CA operates. CA Root Name is the common name applied to the root certificate, which may or may not also indicate the current name of the CA. CA Root Size is the modulus of the RSA algorithm – typically 1024-bit, 2048-bit, or 4096-bit RSA. In the future you may see reference to other algorithms such as ECC or ECDSA. Signature Hash indicates the hash algorithm chosen by the CA for this root certificate – MD2, MD5, SHA1, or SHA2 (SHA256). The hash algorithm used to issue end-use certificates may not be the same as the hash algorithm used for the root certificate: as of January 15, 2009 for example, to Microsoft’s knowledge no CA issues MD5 end-use certificates from any MD5 root certificate distributed by the Windows Root Certificate Program. CA Root Expires is the expiration date of the root certificate, after which the CA cannot issue any more end-use certificates from it. Root certificates are typically kept in distribution after expiration by the Program until the last of these end-use certificates expires. Page 32
- 33. Thumbprint is the hash value which uniquely identifies the root certificate in question. It can be confirmed in the actual root certificate by examining the certificate properties (Details), under the Thumbprint field. THE WINDOWS ROOT CERTIFICATE PROGRAM Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information. For more information about the Microsoft root certificate program requirements, visit the following Microsoft TechNet Web site: http://technet.microsoft.com/en-us/library/cc751157.aspx For more information about the support for EV certificates in Internet Explorer 7, visit the following Web site: http://www.microsoft.com/windows/products/winfamily/ie/ev/default.mspx Back to the top H0W WINDOWS UPDATES ROOT CERTIFICATES Windows XP, Windows Server 2003, Windows Vista and Windows Server 2008 automatically check the list of trusted CAs on the Windows Update Web site. Then, Windows installs root certificates after the certificates are validated by an application of the user. For more information about how Windows updates root certificates in Windows Vista, visit the following Web site: http://technet.microsoft.com/en-us/library/cc749331.aspx For more information about how Windows updates root certificates in Windows Server 2008, visit the following Web site: http://technet.microsoft.com/en-us/library/cc771121.aspx For more information about how Windows updates root certificates in Windows XP, visit the following Web site: http://technet.microsoft.com/en-us/library/bb457160.aspx For more information about how Windows updates root certificates in Windows Server 2003, visit the following Web site: http://technet.microsoft.com/en-us/library/cc738920.aspx Notes Page 33
- 34. In Windows Server 2003, the issuer list cannot be greater than 0x3000. When you update root certificates, the list of trusted CAs increases significantly in size and may cause the list to grow too long. The list is then truncated and may cause problems with authorization. This behavior may also cause schannel event ID 36885. The Root Update package is available for Windows XP client SKUs only. It is not available for Server SKUs. If you install the Root Update package on Server SKUs, you may exceed the limit for how many root certificates that Schannel can handle when reporting the list of roots to clients in a TLS or SSL handshake, as the number of root certificates distributed in the Root Update package exceeds that limit. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base: 933430 Clients cannot make connections if you require client certificates on a Web site or if you use IAS in Windows Server 2003 Back to the top Page 34