# SecureSign Root CA15 root certificate (Cybertrust Japan)

> SecureSign Root CA15 is a root CA certificate operated by Cybertrust Japan (ECDSA P-384, valid until 2045-04-08, SHA-256 E778F0F0). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Mozilla, Microsoft.

Source: https://ssl.sh/roots/cybertrust-japan-securesign-root-ca15/
Last updated: 2026-11-10

SecureSign Root CA15 is a root CA certificate operated by Cybertrust Japan (ECDSA P-384, valid until 2045-04-08, SHA-256 E778F0F0). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Mozilla, Microsoft.

| Field | Value |
|---|---|
| CA owner | Cybertrust Japan |
| Subject | CN=SecureSign Root CA15,O=Cybertrust Japan Co.\, Ltd.,C=JP |
| SHA-256 | E778F0F095FE843729CD1A0082179E5314A9C291442805E1FB1D8FB6B8886C3A |
| SPKI SHA-256 | F0011F92FCF9BE36C7A5B36E7BC862AB20E94EF36FEA8A561DB0A8D7750C1F51 |
| Valid from | 2020-04-08 |
| Expires | 2045-04-08 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA384 |
| Serial number | 1615C7C3D849A7BE690C8A88EDF070F9DDB73E87 |
| SHA-1 (Windows thumbprint) | CBBA83C8C15A5DF1F9736FCAD7EF2813064A077D |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Not included | No | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites; EV policy OIDs: 2.23.140.1.1; First included in: NSS 3.104 / Firefox 131 |
| Apple | Not included | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Secure Email; Not-before cutoff: 2026-05-19 (Secure Email) |

Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 14 intermediate CA certificates signed directly by SecureSign Root CA15: 2 currently valid, 0 expired and 12 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| Cybertrust Japan SureServer CA G8 | Cybertrust Japan / JCSI | 2030-06-22 | Valid | 93D931D5F95411998705B148532F4E16FBCF00F3318DFF9B6A0765ED749C8FD0 |
| Cybertrust Japan SureServer EV CA G8 | Cybertrust Japan / JCSI | 2030-06-22 | Valid | 70C4002E0DF2FF51E691654903BE742D09D5A74A84B15B68FBCDA320FBF3DC6B |
| Cybertrust Japan SureMail CA G8 | Cybertrust Japan / JCSI | 2030-06-22 | Revoked | 8FBD048775F6F4C486CF4960A7BB8B807225E37C74935E5B99CBA9E41383FECA |
| Cybertrust Japan SureTime CA G4 | Cybertrust Japan / JCSI | 2037-09-09 | Revoked | 5022E703CD525D1D45F8CAB522C00B8D371891C9995D28F36E12906B8D1E9EBE |
| Cybertrust Japan SureTime CA G4 | Cybertrust Japan / JCSI | 2036-06-22 | Revoked | FF2D814C8D66794B383EACF5E1F2F44EB767F5C37C9855DC77A989680C6E8D47 |
| Cybertrust Japan SureCode EV CA G4 | Cybertrust Japan / JCSI | 2036-06-22 | Revoked | AEEDAB7F871504EE07CEB3ED93AF034394548B1E655F7C759B9646AB78F0CEBB |
| Cybertrust Japan SureCode CA G4 | Cybertrust Japan / JCSI | 2036-06-22 | Revoked | 42A7E8F7E06F2FC1CE417B26AC6F724E7BCC520A3B64ED506C7AA0B6DA25D63E |
| Cybertrust Japan SureMail CA G8 | Cybertrust Japan / JCSI | 2030-06-22 | Revoked | 195FA1E40EDF0B1BDCB2C4F913DD5FD6CCB58891DF3B73E53C7AEB9AC3F86E28 |
| Cybertrust Japan SureMail CA G6 | Cybertrust Japan / JCSI | 2030-04-09 | Revoked | ED7685BBFCCB13134C04C4ED07F33D7361DC518B381916C402C0EE37B4B21CC0 |
| Cybertrust Japan SureCode EV CA G2 | Cybertrust Japan / JCSI | 2036-04-09 | Revoked | B040BDB929A9C292DFD76134E589538045C9D61EBBD139186422F56FAA4FB8E1 |
| Cybertrust Japan SureServer CA G6 | Cybertrust Japan / JCSI | 2030-04-09 | Revoked | 7D494CE0DCF09312874C0296D4F8F9E2A7DA21CEE272201E56E905464FA6B3D6 |
| Cybertrust Japan SureCode CA G2 | Cybertrust Japan / JCSI | 2036-04-09 | Revoked | 6AA7415D875D7B8945AE8B61E2AF2E2E78C98E058B8C2D072D41B2D48483FAA1 |
| Cybertrust Japan SureServer EV CA G5 | Cybertrust Japan / JCSI | 2030-04-09 | Revoked | 5ED4D96D978FAB1760216B6D7C6C4F636BFAD0CA25AC85BA7AFC459AFE7DA9F2 |
| Cybertrust Japan SureTime CA G2 | Cybertrust Japan / JCSI | 2036-04-09 | Revoked | 2B1F4353FAC8EA7269E761C96DDC43AD73334B9717CB5F2426E38DE20E460609 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as SecureSign Root CA15 with a different issuer, so a client has to carry SecureSign Root CA15 itself in its root store to trust it.


## What happens when it expires

SecureSign Root CA15 is valid until 2045-04-08, about 18.4 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is SecureSign Root CA15 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Mozilla, Microsoft trust it for TLS server authentication; Chrome, Apple do not.

**When does SecureSign Root CA15 expire?**

On 2045-04-08, about 18.4 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has SecureSign Root CA15 issued?**

The CCADB lists 14: 2 valid, 0 expired and 12 revoked. The newest valid one is Cybertrust Japan SureServer CA G8, valid until 2030-06-22.

**Is SecureSign Root CA15 cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).