# Certinomis - Root CA root certificate (Docaposte Certinomis)

> Certinomis - Root CA is a root CA certificate operated by Docaposte Certinomis (RSA 4096, valid until 2033-10-21, SHA-256 2A99F5BC). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

Source: https://ssl.sh/roots/certinomis-root-ca/
Last updated: 2026-11-10

Certinomis - Root CA is a root CA certificate operated by Docaposte Certinomis (RSA 4096, valid until 2033-10-21, SHA-256 2A99F5BC). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

| Field | Value |
|---|---|
| CA owner | Docaposte Certinomis |
| Subject | CN=Certinomis - Root CA,OU=0002 433998903,O=Certinomis,C=FR |
| SHA-256 | 2A99F5BC1174B73CBB1D620884E01C34E51CCB3978DA125F0E33268883BF4158 |
| SPKI SHA-256 | 6B1A505E0246F2F60C490FF0C097A7BE27210CBB7500237F88B0CD48298BC9B8 |
| Valid from | 2013-10-21 |
| Expires | 2033-10-21 |
| Key | RSA 4096 |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 1 |
| SHA-1 (Windows thumbprint) | 9D70BB01A5A4A018112EF71C01B932C534E788A8 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Not included | No | - | - |
| Mozilla | Removed | No | - | - |
| Apple | Removed | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Secure Email, Time Stamping |

The CCADB lists no EV policy OID for Certinomis - Root CA.

## Intermediate CAs issued by this root

The CCADB lists 14 intermediate CA certificates signed directly by Certinomis - Root CA: 6 currently valid, 5 expired and 3 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| Certinomis - Timestamp CA | Docaposte Certinomis SAS | 2033-10-18 | Valid | E51E998355F742822F6BC4F7AA6342041F031E10F730DB6F9A67722B03F36819 |
| Certinomis - Easy CA G2 | Docaposte Certinomis SAS | 2033-10-18 | Valid | ADF2D6193E97685B33CD306869A016594347AB260F160BDD8FD56FC273CEDE5E |
| Certinomis - Standard CA G2 | Docaposte Certinomis SAS | 2033-10-18 | Valid | AC374ADD6F654ADB5F1F76A7FAC5EA8FBBA2045D5647193547985208092FC6F2 |
| Certinomis - Web CA | Docaposte Certinomis SAS | 2033-10-18 | Valid | 97ABD7593E9AE8DF22FF46C417C763DD69AC551E2A78B164B66B97E63B1F86A8 |
| Certinomis - Prime CA G2 | Docaposte Certinomis SAS | 2033-10-18 | Valid | 25F2CFF2D8A3D8E903B4331D76F3B946756E693C9A589F7A5E121A2C6EC5A086 |
| Certinomis - Safe CA | Docaposte Certinomis SAS | 2033-10-18 | Valid | 03B5FFE7DB4D85717CB2ED07119DD63A8D592C2FD04F2988D1C074F0FFFAAA2E |
| Certinomis - Onetime CA 2016 | Docaposte Certinomis SAS | 2026-10-13 | Expired | 350F568D9EB610C6A12373E6A31BE9876FA784E289C890E7BA07F1C346820D93 |
| Certinomis - Prime CA | Docaposte Certinomis SAS | 2023-10-21 | Expired | F9295618E7A752D107423C3D3E1FFE0D894F14369A188E733EEE36884EA73853 |
| Certinomis - AA et Agents | Docaposte Certinomis SAS | 2023-10-21 | Expired | E6E8C0C0008AF7B6910ED50DDD88B118167805958DD67A778B390B72D9BBB5E6 |
| Certinomis - Standard CA | Docaposte Certinomis SAS | 2023-10-21 | Expired | 7109C8A0A805DA664733E6139DC10668B760D2E308756572B090A7F3FAE7FB9A |
| Certinomis - Easy CA | Docaposte Certinomis SAS | 2023-10-21 | Expired | 1E7D52025BE0FEF49628F0B34DC8798F2DE7E0B42EC429594A62F5F8A388E3BF |
| StartCom EV SSL ICA | Docaposte Certinomis SAS | 2027-04-13 | Revoked | F6044A7B147C26BABAB17C5189A09BE781919E95E26F8014D6A8B9880A6BABED |
| StartCom BR SSL ICA | Docaposte Certinomis SAS | 2027-04-13 | Revoked | 6D9A258172F5CD1BDFF447EF64F9A9593070F4ACCBFD07465E4A7CBD205A5CFC |
| Certinomis - Onetime CA | Docaposte Certinomis SAS | 2025-04-30 | Revoked | F735DB59F240540BEFCF1ABF57D4128EC285A3A2ACE4CF4987DED4A6847281A4 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as Certinomis - Root CA with a different issuer, so a client has to carry Certinomis - Root CA itself in its root store to trust it.


## What happens when it expires

Certinomis - Root CA is valid until 2033-10-21, about 6.9 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is Certinomis - Root CA trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Microsoft trust it for TLS server authentication; Chrome, Mozilla, Apple do not.

**When does Certinomis - Root CA expire?**

On 2033-10-21, about 6.9 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has Certinomis - Root CA issued?**

The CCADB lists 14: 6 valid, 5 expired and 3 revoked. The newest valid one is Certinomis - Timestamp CA, valid until 2033-10-18.

**Is Certinomis - Root CA cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).