Data
Root certificates trusted for TLS
The 207 root CA certificates that at least one major root program (Chrome, Mozilla, Apple, Microsoft) trusts for TLS server authentication, with fingerprints, keys, expiry dates and per-store status from the CCADB.
- Chrome 100
- Mozilla 112
- Apple 117
- Microsoft 193
Counts = roots each store currently trusts for TLS server authentication.
- trusted for TLS
- included with limits (NotBefore / no TLS bit)
- removed or blocked
- not included
| Root certificate | CA owner | Key | Expires | Ch | Mo | Ap | MS |
|---|---|---|---|---|---|---|---|
| A-Trust-Root-07 | A-Trust | RSA 4096 | 2036-11-19 | Not included | Not included | Not included | Included |
| A-Trust-Root-09 | A-Trust | RSA 4096 | 2036-07-14 | Not included | Not included | Not included | Included |
| ACCVRAIZ1 | ACCV (Spain) | RSA 4096 | 2030-12-31 | Included | Included | Included | Included |
| Actalis Authentication Root CA | Actalis | RSA 4096 | 2030-09-22 | Included | Included | Included | Included |
| Actalis TLS Server ECC Root CA 2025 | Actalis | ECDSA P-384 | 2050-02-22 | Not included | Not included | Not included | Included |
| Actalis TLS Server RSA Root CA 2025 | Actalis | RSA 4096 | 2050-02-22 | Not included | Not included | Not included | Included |
| Amazon Root CA 1 | Amazon Trust Services | RSA 2048 | 2038-01-17 | Included | Included | Included | Included |
| Amazon Root CA 2 | Amazon Trust Services | RSA 4096 | 2040-05-26 | Included | Included | Included | Included |
| Amazon Root CA 3 | Amazon Trust Services | ECDSA P-256 | 2040-05-26 | Included | Included | Included | Included |
| Amazon Root CA 4 | Amazon Trust Services | ECDSA P-384 | 2040-05-26 | Included | Included | Included | Included |
| Starfield Services Root Certificate Authority - G2 | Amazon Trust Services | RSA 2048 | 2037-12-31 | Removed | Included | Included | Included |
| TunTrust Root CA | ANCE (Tunisia) | RSA 4096 | 2044-04-26 | Included | Included | Not included | Included |
| ANF Secure Server Root CA | ANF AC | RSA 4096 | 2039-08-30 | Included | Included | Not included | Not included |
| Atos TrustedRoot 2011 | Atos | RSA 2048 | 2030-12-31 | Removed | Included | Included | Included |
| Atos TrustedRoot Root CA ECC TLS 2021 | Atos | ECDSA P-384 | 2041-04-17 | Included | Included | Included | Included |
| Atos TrustedRoot Root CA RSA TLS 2021 | Atos | RSA 4096 | 2041-04-17 | Included | Included | Included | Included |
| BJCA Global Root CA1 | BJCA | RSA 4096 | 2044-12-12 | Not included | Included | Not included | Not included |
| BJCA Global Root CA2 | BJCA | ECDSA P-384 | 2044-12-12 | Not included | Included | Not included | Not included |
| Buypass Class 2 Root CA | Buypass | RSA 4096 | 2040-10-26 | Included | Removed | Included | Included |
| Buypass Class 3 Root CA | Buypass | RSA 4096 | 2040-10-26 | Included | Removed | Included | Included |
| CCA India 2022 SPL | CCA India | RSA 4096 | 2042-09-20 | Not included | Not included | Not included | Included |
| Certainly Root E1 | Certainly LLC | ECDSA P-384 | 2046-04-01 | Included | Included | Included | Not included |
| Certainly Root R1 | Certainly LLC | RSA 4096 | 2046-04-01 | Included | Included | Included | Not included |
| Certigna | Certigna | RSA 2048 | 2027-06-29 | Removed | Included | Included | Included |
| Certigna Root CA | Certigna | RSA 4096 | 2033-10-01 | Included | Included | Not included | Included |
| certSIGN ROOT CA | certSIGN | RSA 2048 | 2031-07-04 | Removed | Removed | Included | Included (NotBefore cutoff) |
| certSIGN ROOT CA G2 | certSIGN | RSA 4096 | 2042-02-06 | Included | Included | Included | Included |
| Certum EC-384 CA | Certum | ECDSA P-384 | 2043-03-26 | Included | Included | Included | Included |
| Certum TLS ECC Root CA | Certum | ECDSA P-384 | 2048-01-26 | Not included | Not included | Not included | Included |
| Certum TLS RSA Root CA | Certum | RSA 4096 | 2048-01-26 | Not included | Not included | Not included | Included |
| Certum Trusted Network CA | Certum | RSA 2048 | 2029-12-31 | Included | Included | Included | Included |
| Certum Trusted Network CA 2 | Certum | RSA 4096 | 2046-10-06 | Included | Included | Included | Included |
| Certum Trusted Root CA | Certum | RSA 4096 | 2043-03-16 | Included | Included | Included | Included |
| CFCA EV ROOT | CFCA | RSA 4096 | 2029-12-31 | Included | Included | Included | Included |
| ePKI Root Certification Authority | Chunghwa Telecom | RSA 4096 | 2034-12-20 | Removed | Removed | Included | Included |
| HiPKI Root CA - G1 | Chunghwa Telecom | RSA 4096 | 2037-12-31 | Included | Included | Included | Included |
| ComSign Global Root CA | ComSign | RSA 4096 | 2036-07-16 | Not included | Not included | Blocked | Included |
| SecureSign Root CA14 | Cybertrust Japan | RSA 4096 | 2045-04-08 | Not included | Included | Not included | Included |
| SecureSign Root CA15 | Cybertrust Japan | ECDSA P-384 | 2045-04-08 | Not included | Included | Not included | Included |
| D-TRUST BR Root CA 1 2020 | D-Trust | ECDSA P-384 | 2035-02-11 | Included | Included | Not included | Included |
| D-TRUST BR Root CA 2 2023 | D-Trust | RSA 4096 | 2038-05-09 | Included | Included | Not included | Included |
| D-TRUST EV Root CA 1 2020 | D-Trust | ECDSA P-384 | 2035-02-11 | Included | Included | Not included | Included |
| D-TRUST EV Root CA 2 2023 | D-Trust | RSA 4096 | 2038-05-09 | Included | Included | Not included | Included |
| D-TRUST Root Class 3 CA 2 2009 | D-Trust | RSA 2048 | 2029-11-05 | Included | Included | Included | Included |
| D-TRUST Root Class 3 CA 2 EV 2009 | D-Trust | RSA 2048 | 2029-11-05 | Included | Included | Included | Included |
| Australian Defence Public Root CA | Department of Defence Australia | RSA 2048 | 2036-11-28 | Not included | Not included | Not included | Included |
| T-TeleSec GlobalRoot Class 2 | Deutsche Telekom Security | RSA 2048 | 2033-10-01 | Included | Included | Included | Included |
| T-TeleSec GlobalRoot Class 3 | Deutsche Telekom Security | RSA 2048 | 2033-10-01 | Included | Included | Included | Included |
| Telekom Security TLS ECC Root 2020 | Deutsche Telekom Security | ECDSA P-384 | 2045-08-25 | Included | Included | Not included | Included |
| Telekom Security TLS RSA Root 2023 | Deutsche Telekom Security | RSA 4096 | 2048-03-27 | Included | Included | Not included | Included |
| DigiCert Assured ID Root CA | DigiCert | RSA 2048 | 2031-11-10 | Removed | Included | Included | Included |
| DigiCert Assured ID Root G2 | DigiCert | RSA 2048 | 2038-01-15 | Included | Included | Included | Included |
| DigiCert Assured ID Root G3 | DigiCert | ECDSA P-384 | 2038-01-15 | Included | Included | Included | Included |
| DigiCert ECC P384 Root G5 | DigiCert | ECDSA P-384 | 2046-01-14 | Not included | Not included | Not included | Included |
| DigiCert Global Root CA | DigiCert | RSA 2048 | 2031-11-10 | Removed | Included | Included | Included |
| DigiCert Global Root G2 | DigiCert | RSA 2048 | 2038-01-15 | Included | Included | Included | Included |
| DigiCert Global Root G3 | DigiCert | ECDSA P-384 | 2038-01-15 | Included | Included | Included | Included |
| DigiCert High Assurance EV Root CA | DigiCert | RSA 2048 | 2031-11-10 | Removed | Included | Included | Included |
| DigiCert RSA4096 Root G5 | DigiCert | RSA 4096 | 2046-01-14 | Not included | Not included | Not included | Included |
| DigiCert TLS ECC P384 Root G5 | DigiCert | ECDSA P-384 | 2046-01-14 | Included | Included | Included | Included |
| DigiCert TLS RSA4096 Root G5 | DigiCert | RSA 4096 | 2046-01-14 | Included | Included | Included | Included |
| DigiCert Trusted Root G4 | DigiCert | RSA 4096 | 2038-01-15 | Included | Included | Included | Included |
| QuoVadis Root CA 1 G3 | DigiCert | RSA 4096 | 2042-01-12 | Removed | Included | Included | Included |
| QuoVadis Root CA 2 | DigiCert | RSA 4096 | 2031-11-24 | Removed | Included | Included | Included |
| QuoVadis Root CA 2 G3 | DigiCert | RSA 4096 | 2042-01-12 | Included | Included | Included | Included |
| QuoVadis Root CA 3 | DigiCert | RSA 4096 | 2031-11-24 | Removed | Included | Included | Included |
| QuoVadis Root CA 3 G3 | DigiCert | RSA 4096 | 2042-01-12 | Included | Included | Included | Included |
| QuoVadis TLS ECC P384 Root G4 | DigiCert | ECDSA P-384 | 2048-03-09 | Not included | Not included | Not included | Included |
| QuoVadis TLS RSA 4096 Root G4 | DigiCert | RSA 4096 | 2048-03-09 | Not included | Not included | Not included | Included |
| Verizon Global Root CA | DigiCert | RSA 2048 | 2034-07-30 | Not included | Not included | Not included | Included |
| CA Disig Root R2 | Disig, a.s. | RSA 4096 | 2042-07-19 | Included | Included | Included | Included |
| CA Disig TLS Root R3 | Disig, a.s. | RSA 4096 | 2040-09-14 | Not included | Not included | Not included | Included |
| Certinomis - Root CA | Docaposte Certinomis | RSA 4096 | 2033-10-21 | Not included | Removed | Removed | Included |
| GLOBALTRUST | e-commerce monitoring (GLOBALTRUST) | RSA 4096 | 2036-09-18 | Not included | Not included | Not included | Included |
| GLOBALTRUST 2015 | e-commerce monitoring (GLOBALTRUST) | RSA 4096 | 2040-06-10 | Not included | Not included | Not included | Included |
| GLOBALTRUST 2020 | e-commerce monitoring (GLOBALTRUST) | RSA 4096 | 2040-06-10 | Removed | Removed | Blocked | Included |
| CAEDICOM Root | EDICOM | RSA 4096 | 2034-05-21 | Not included | Not included | Not included | Included |
| emSign ECC Root CA - C3 | eMudhra | ECDSA P-384 | 2043-02-18 | Removed | Removed | Not included | Included |
| emSign ECC Root CA - G3 | eMudhra | ECDSA P-384 | 2043-02-18 | Blocked | Removed | Included | Included |
| emSign Root CA - C1 | eMudhra | RSA 2048 | 2043-02-18 | Removed | Removed | Not included | Included |
| emSign Root CA - G1 | eMudhra | RSA 2048 | 2043-02-18 | Included | Included | Included | Included |
| emSign Root TLS CA - G1 | eMudhra | RSA 4096 | 2049-02-07 | Not included | Not included | Not included | Included |
| emSign Root TLS CA - G3 | eMudhra | ECDSA P-384 | 2049-02-07 | Not included | Not included | Not included | Included |
| AffirmTrust Commercial | Entrust | RSA 2048 | 2030-12-31 | Removed | Removed | Included | Included (NotBefore cutoff) |
| AffirmTrust Networking | Entrust | RSA 2048 | 2030-12-31 | Removed | Removed | Included | Included (NotBefore cutoff) |
| AffirmTrust Premium | Entrust | RSA 4096 | 2040-12-31 | Removed | Removed | Included | Included (NotBefore cutoff) |
| AffirmTrust Premium ECC | Entrust | ECDSA P-384 | 2040-12-31 | Removed | Removed | Included | Included (NotBefore cutoff) |
| Fina Root CA | Fina | RSA 4096 | 2035-11-24 | Not included | Not included | Not included | Included |
| DVV Gov. Root CA - G3 ECC | Finland DVV (VRK) | ECDSA P-384 | 2042-05-05 | Not included | Not included | Not included | Included |
| DVV Gov. Root CA - G3 RSA | Finland DVV (VRK) | RSA 4096 | 2042-05-05 | Not included | Not included | Not included | Included |
| VRK Gov. Root CA - G2 | Finland DVV (VRK) | RSA 4096 | 2038-12-13 | Not included | Not included | Not included | Included |
| Autoridad de Certificacion Firmaprofesional CIF A62634068 | Firmaprofesional | RSA 4096 | 2036-05-05 | Included | Included | Not included | Included |
| Autoridad de Certificacion Firmaprofesional CIF A62634068 | Firmaprofesional | RSA 4096 | 2030-12-31 | Not included | Removed | Included | Included |
| AC RAIZ FNMT-RCM | FNMT (Spain) | RSA 4096 | 2030-01-01 | Included | Included | Included | Included |
| AC RAIZ FNMT-RCM SERVIDORES SEGUROS | FNMT (Spain) | ECDSA P-384 | 2043-12-20 | Included | Included | Not included | Included |
| AC RAIZ FNMT-RCM SERVIDORES SEGUROS G2R | FNMT (Spain) | RSA 4096 | 2040-12-12 | Not included | Not included | Not included | Included |
| GDCA TrustAUTH R5 ROOT | Global Digital Cybersecurity Authority (GDCA) | RSA 4096 | 2040-12-31 | Included | Included | Included | Included |
| GlobalSign | GlobalSign | RSA 2048 | 2029-03-18 | Included | Included | Included | Included |
| GlobalSign | GlobalSign | ECDSA P-384 | 2038-01-19 | Included | Included | Included | Included |
| GlobalSign | GlobalSign | RSA 4096 | 2034-12-10 | Included | Included | Included | Included |
| GlobalSign Root CA | GlobalSign | RSA 2048 | 2028-01-28 | Removed | Included | Included | Included |
| GlobalSign Root E46 | GlobalSign | ECDSA P-384 | 2046-03-20 | Included | Included | Included | Included |
| GlobalSign Root R46 | GlobalSign | RSA 4096 | 2046-03-20 | Included | Included | Included | Included |
| Go Daddy Class 2 Certification Authority | GoDaddy | RSA 2048 | 2034-06-29 | Removed | Included | Included | Included |
| Go Daddy Root Certificate Authority - G2 | GoDaddy | RSA 2048 | 2037-12-31 | Included | Included | Included | Included |
| GoDaddy TLS Root CA - R1 | GoDaddy | RSA 4096 | 2040-08-24 | Not included | Not included | Not included | Included |
| Starfield Class 2 Certification Authority | GoDaddy | RSA 2048 | 2034-06-29 | Removed | Included | Included | Included |
| Starfield Root Certificate Authority - G2 | GoDaddy | RSA 2048 | 2037-12-31 | Included | Included | Included | Included |
| Starfield TLS Root CA - R1 | GoDaddy | RSA 4096 | 2040-08-23 | Not included | Not included | Not included | Included |
| GlobalSign | Google Trust Services | ECDSA P-256 | 2038-01-19 | Included | Included | Included | Included |
| GlobalSign | Google Trust Services | ECDSA P-256 | 2038-01-19 | Not included | Removed | Removed | Included |
| GTS Root R1 | Google Trust Services | RSA 4096 | 2036-06-22 | Included | Included | Included | Included |
| GTS Root R1 | Google Trust Services | RSA 4096 | 2036-06-22 | Not included | Removed | Removed | Included |
| GTS Root R2 | Google Trust Services | RSA 4096 | 2036-06-22 | Removed | Included | Included | Included |
| GTS Root R2 | Google Trust Services | RSA 4096 | 2036-06-22 | Not included | Removed | Removed | Included |
| GTS Root R3 | Google Trust Services | ECDSA P-384 | 2036-06-22 | Removed | Included | Included | Included |
| GTS Root R3 | Google Trust Services | ECDSA P-384 | 2036-06-22 | Not included | Removed | Removed | Included |
| GTS Root R4 | Google Trust Services | ECDSA P-384 | 2036-06-22 | Included | Included | Included | Included |
| GTS Root R4 | Google Trust Services | ECDSA P-384 | 2036-06-22 | Not included | Removed | Removed | Included |
| Halcom Root Certificate Authority | HALCOM d.d. | RSA 2048 | 2036-06-10 | Not included | Not included | Not included | Included |
| HARICA TLS ECC Root CA 2021 | HARICA | ECDSA P-384 | 2045-02-13 | Included | Included | Included | Included |
| HARICA TLS RSA Root CA 2021 | HARICA | RSA 4096 | 2045-02-13 | Included | Included | Included | Included |
| Hellenic Academic and Research Institutions ECC RootCA 2015 | HARICA | ECDSA P-384 | 2040-06-30 | Removed | Included | Included | Included |
| Hellenic Academic and Research Institutions RootCA 2015 | HARICA | RSA 4096 | 2040-06-30 | Removed | Included | Included | Included |
| Hongkong Post Root CA 3 | Hongkong Post / Certizen | RSA 4096 | 2042-06-03 | Included | Included | Included | Included |
| IdenTrust Commercial Root CA 1 | IdenTrust | RSA 4096 | 2034-01-16 | Included | Included | Included | Included |
| IdenTrust Commercial Root TLS ECC CA 2 | IdenTrust | ECDSA P-521 | 2039-04-11 | Not included | Not included | Not included | Included |
| IdenTrust Commercial Root TLS RSA CA 2 | IdenTrust | RSA 4096 | 2039-12-14 | Not included | Not included | Not included | Included |
| IdenTrust Public Sector Root CA 1 | IdenTrust | RSA 4096 | 2034-01-16 | Removed | Included | Included | Included |
| Autoridade Certificadora Raiz Brasileira v10 | ITI (Brazil) | RSA 4096 | 2032-07-01 | Not included | Not included | Not included | Included |
| vTrus ECC Root CA | iTrusChina Co., Ltd. | ECDSA P-384 | 2043-07-31 | Included | Included | Not included | Not included |
| vTrus Root CA | iTrusChina Co., Ltd. | RSA 4096 | 2043-07-31 | Included | Included | Not included | Not included |
| Izenpe.com | Izenpe S.A. | RSA 4096 | 2037-12-13 | Included | Included | Included | Included |
| TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 | Kamu SM (Turkey) | RSA 2048 | 2043-10-25 | Included | Included | Included | Included |
| SZAFIR ROOT CA2 | KIR | RSA 2048 | 2035-10-19 | Included | Included | Not included | Included |
| MOIS SSL Root CA | KLID (Korea) | RSA 4096 | 2043-02-22 | Not included | Not included | Not included | Included |
| ISRG Root X1 | Let's Encrypt | RSA 4096 | 2035-06-04 | Included | Included | Included | Included |
| ISRG Root X2 | Let's Encrypt | ECDSA P-384 | 2040-09-17 | Included | Included | Included | Included |
| e-Szigno Root CA 2017 | Microsec Ltd. | ECDSA P-256 | 2042-08-22 | Included | Included | Not included | Included |
| e-Szigno TLS Root CA 2023 | Microsec Ltd. | ECDSA P-521 | 2038-07-17 | Included | Included | Not included | Included |
| Microsec e-Szigno Root CA 2009 | Microsec Ltd. | RSA 2048 | 2029-12-30 | Included | Included | Included | Included |
| Microsoft ECC Root Certificate Authority 2017 | Microsoft | ECDSA P-384 | 2042-07-18 | Included | Included | Included | Included |
| Microsoft RSA Root Certificate Authority 2017 | Microsoft | RSA 4096 | 2042-07-18 | Included | Included | Included | Included |
| NAVER Cloud Trust Services ECC Root G1 | NAVER Cloud Trust Services | ECDSA P-384 | 2043-06-06 | Not included | Not included | Not included | Included |
| NAVER Cloud Trust Services RSA Root G1 | NAVER Cloud Trust Services | RSA 4096 | 2043-06-06 | Not included | Not included | Not included | Included |
| NAVER Global Root Certification Authority | NAVER Cloud Trust Services | RSA 4096 | 2037-08-18 | Included | Included | Included | Included |
| NetLock Arany (Class Gold) Főtanúsítvány | NETLOCK | RSA 2048 | 2028-12-06 | Removed | Included | Blocked | Included |
| NetLock Platina (Class Platinum) Főtanúsítvány | NETLOCK | RSA 4096 | 2028-12-06 | Not included | Not included | Not included | Included |
| Netrust Root CA 2 | Netrust Pte Ltd | RSA 4096 | 2041-09-01 | Not included | Not included | Not included | Included |
| OATI WebCARES Root CA | OATI | RSA 4096 | 2038-06-03 | Not included | Not included | Not included | Included |
| OATI webCARES Server Root CA | OATI | RSA 4096 | 2045-12-08 | Not included | Not included | Not included | Included |
| OISTE Server Root ECC G1 | OISTE | ECDSA P-384 | 2048-05-24 | Included | Included | Not included | Not included |
| OISTE Server Root RSA G1 | OISTE | RSA 4096 | 2048-05-24 | Included | Included | Not included | Not included |
| OISTE WISeKey Global Root GB CA | OISTE | RSA 2048 | 2039-12-01 | Included | Included | Included | Included |
| OISTE WISeKey Global Root GC CA | OISTE | ECDSA P-384 | 2042-05-09 | Included | Included | Included | Included |
| PostSignum Root QCA 4 | PostSignum | RSA 4096 | 2038-07-26 | Not included | Not included | Not included | Included |
| I.CA TLS Root CA/RSA 05/2022 | První certifikační autorita (I.CA) | RSA 4096 | 2047-05-03 | Not included | Not included | Not included | Included |
| SECOM TLS ECC Root CA 2024 | SECOM Trust Systems | ECDSA P-384 | 2049-01-14 | Not included | Included | Included | Included |
| SECOM TLS RSA Root CA 2024 | SECOM Trust Systems | RSA 4096 | 2049-01-14 | Not included | Included | Included | Included |
| Security Communication ECC RootCA1 | SECOM Trust Systems | ECDSA P-384 | 2038-01-18 | Included | Included | Not included | Included |
| Security Communication RootCA2 | SECOM Trust Systems | RSA 2048 | 2029-05-29 | Included | Included | Included | Included |
| AAA Certificate Services | Sectigo | RSA 2048 | 2028-12-31 | Removed | Included | Included | Included |
| COMODO Certification Authority | Sectigo | RSA 2048 | 2029-12-31 | Not included | Included | Included | Removed |
| COMODO Certification Authority | Sectigo | RSA 2048 | 2030-12-31 | Removed | Not included | Not included | Included |
| COMODO ECC Certification Authority | Sectigo | ECDSA P-384 | 2038-01-18 | Included | Included | Included | Included |
| COMODO RSA Certification Authority | Sectigo | RSA 4096 | 2038-01-18 | Included | Included | Included | Included |
| Entrust Root Certification Authority | Sectigo | RSA 2048 | 2026-11-27 | Removed | Removed | Included | Included |
| Entrust Root Certification Authority - EC1 | Sectigo | ECDSA P-384 | 2037-12-18 | Removed | Included | Included | Included |
| Entrust Root Certification Authority - G2 | Sectigo | RSA 2048 | 2030-12-07 | Removed | Included | Included | Included |
| Entrust Root Certification Authority - G4 | Sectigo | RSA 4096 | 2037-12-27 | Removed | Included | Included | Included |
| Entrust.net Certification Authority (2048) | Sectigo | RSA 2048 | 2029-07-24 | Removed | Included | Included | Included |
| Sectigo Public Server Authentication Root E46 | Sectigo | ECDSA P-384 | 2046-03-21 | Included | Included | Included | Included |
| Sectigo Public Server Authentication Root R46 | Sectigo | RSA 4096 | 2046-03-21 | Included | Included | Included | Included |
| USERTrust ECC Certification Authority | Sectigo | ECDSA P-384 | 2038-01-18 | Included | Included | Included | Included |
| USERTrust RSA Certification Authority | Sectigo | RSA 4096 | 2038-01-18 | Included | Included | Included | Included |
| UCA Extended Validation Root | SHECA | RSA 4096 | 2038-12-31 | Included | Included | Not included | Included |
| UCA Global G2 Root | SHECA | RSA 4096 | 2040-12-31 | Included | Included | Not included | Included |
| SI-TRUST Root | SI-TRUST | RSA 3072 | 2037-12-25 | Not included | Not included | Not included | Included |
| Secure Global CA | SSL.com | RSA 2048 | 2029-12-31 | Removed | Removed | Blocked | Included |
| SecureTrust CA | SSL.com | RSA 2048 | 2029-12-31 | Removed | Removed | Included | Included |
| SSL.com EV Root Certification Authority ECC | SSL.com | ECDSA P-384 | 2041-02-12 | Included | Included | Included | Included |
| SSL.com EV Root Certification Authority RSA R2 | SSL.com | RSA 4096 | 2042-05-30 | Included | Included | Included | Included |
| SSL.com Root Certification Authority ECC | SSL.com | ECDSA P-384 | 2041-02-12 | Included | Included | Included | Included |
| SSL.com Root Certification Authority RSA | SSL.com | RSA 4096 | 2041-02-12 | Included | Included | Included | Included |
| SSL.com TLS ECC Root CA 2022 | SSL.com | ECDSA P-384 | 2046-08-19 | Included | Included | Included | Included |
| SSL.com TLS RSA Root CA 2022 | SSL.com | RSA 4096 | 2046-08-19 | Included | Included | Included | Included |
| Trustwave Global Certification Authority | SSL.com | RSA 4096 | 2042-08-23 | Removed | Removed | Included | Included |
| Trustwave Global ECC P256 Certification Authority | SSL.com | ECDSA P-256 | 2042-08-23 | Removed | Removed | Included | Included |
| Trustwave Global ECC P384 Certification Authority | SSL.com | ECDSA P-384 | 2042-08-23 | Removed | Removed | Included | Included |
| XRamp Global Certification Authority | SSL.com | RSA 2048 | 2035-01-01 | Removed | Removed | Included | Included |
| SwissSign Gold CA - G2 | SwissSign AG | RSA 4096 | 2036-10-25 | Removed | Included | Included | Included |
| SwissSign RSA TLS Root CA 2022 - 1 | SwissSign AG | RSA 4096 | 2047-06-08 | Included | Included | Not included | Included |
| SwissSign Silver CA - G2 | SwissSign AG | RSA 4096 | 2036-10-25 | Removed | Removed | Included | Included (NotBefore cutoff) |
| Telia EC TLS Root CA v3 | Telia Company | ECDSA P-384 | 2048-05-23 | Not included | Included | Not included | Included |
| Telia Root CA v2 | Telia Company | RSA 4096 | 2043-11-29 | Included | Included | Included | Included |
| Telia RSA TLS Root CA v3 | Telia Company | RSA 4096 | 2048-05-23 | Not included | Included | Not included | Included |
| TeliaSonera Root CA v1 | Telia Company | RSA 4096 | 2032-10-18 | Removed | Removed | Included | Included |
| Thailand National Root Certification Authority - G1 | Thailand NRCA (ETDA) | RSA 4096 | 2036-03-27 | Not included | Not included | Not included | Included |
| TrustAsia Global Root CA G3 | TrustAsia | RSA 4096 | 2046-05-19 | Not included | Included | Not included | Not included |
| TrustAsia Global Root CA G4 | TrustAsia | ECDSA P-384 | 2046-05-19 | Not included | Included | Not included | Not included |
| TrustAsia TLS ECC Root CA | TrustAsia | ECDSA P-384 | 2044-05-15 | Included | Included | Not included | Not included |
| TrustAsia TLS RSA Root CA | TrustAsia | RSA 4096 | 2044-05-15 | Included | Included | Not included | Not included |
| TWCA CYBER Root CA | TWCA | RSA 4096 | 2047-11-22 | Included | Included | Not included | Included |
| TWCA Global Root CA | TWCA | RSA 4096 | 2030-12-31 | Included | Included | Included | Included |
| TWCA Root Certification Authority | TWCA | RSA 2048 | 2030-12-31 | Removed | Included | Included | Included |
| Visa Public ECC Root CA | Visa | ECDSA P-384 | 2041-03-15 | Not included | Not included | Not included | Included |
| Visa TLS Root CA | Visa | RSA 4096 | 2034-03-06 | Not included | Not included | Not included | Included |
About this data
The list combines two public CCADB reports: the TLS Server Authentication report (roots that at least one CCADB root store trusts for server authentication) and the trust-bit report for all included roots. Fingerprints, keys and dates are parsed from the certificates themselves. Status values are copied as published; anything the reports don't contain is shown as Unknown. This page is not a root store: use your operating system's or browser's own store for validation.
- /data/pki/roots.json — all roots with fingerprints, keys, dates and per-store status
- /data/pki/cas.json — roots grouped by CA owner