# CCA India 2022 SPL root certificate (CCA India)

> CCA India 2022 SPL is a root CA certificate operated by CCA India (RSA 4096, valid until 2042-09-20, SHA-256 B724689B). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

Source: https://ssl.sh/roots/cca-india-2022-spl/
Last updated: 2026-11-10

CCA India 2022 SPL is a root CA certificate operated by CCA India (RSA 4096, valid until 2042-09-20, SHA-256 B724689B). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

| Field | Value |
|---|---|
| CA owner | CCA India |
| Subject | CN=CCA India 2022 SPL,O=India PKI,C=IN |
| SHA-256 | B724689B79B2EF9421EF8F5CC733EB093851B170EE715177005A09F226D8C91A |
| SPKI SHA-256 | 688977E68862A593E25336F4F4563ECA58998D04B40EF9C89AA637B2AA159B18 |
| Valid from | 2022-09-20 |
| Expires | 2042-09-20 |
| Key | RSA 4096 |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 628281C6EEBEC73F78087E5FF58F49F4 |
| SHA-1 (Windows thumbprint) | 9152D077FEF058914009BB4C0E42A710A38238AF |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Not included | No | - | - |
| Mozilla | Not included | No | - | - |
| Apple | Not included | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication |

The CCADB lists no EV policy OID for CCA India 2022 SPL.

## Intermediate CAs issued by this root

The CCADB lists 1 intermediate CA certificates signed directly by CCA India 2022 SPL: 1 currently valid, 0 expired and 0 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| IDRBT CA SPL 2022-1 | Government of India, Ministry of Communications & Information Technology, Controller of Certifying Authorities (CCA) | 2035-01-08 | Valid | F2A2A3BC061917126EB9D3DCEDF6335685C22328081F73981A3F55DEEFE81D7E |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as CCA India 2022 SPL with a different issuer, so a client has to carry CCA India 2022 SPL itself in its root store to trust it.


## What happens when it expires

CCA India 2022 SPL is valid until 2042-09-20, about 15.9 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is CCA India 2022 SPL trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Microsoft trust it for TLS server authentication; Chrome, Mozilla, Apple do not.

**When does CCA India 2022 SPL expire?**

On 2042-09-20, about 15.9 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has CCA India 2022 SPL issued?**

The CCADB lists 1: 1 valid, 0 expired and 0 revoked. The newest valid one is IDRBT CA SPL 2022-1, valid until 2035-01-08.

**Is CCA India 2022 SPL cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).