# DigiCert TLS ECC P384 Root G5 root certificate (DigiCert)

> DigiCert TLS ECC P384 Root G5 is a root CA certificate operated by DigiCert (ECDSA P-384, valid until 2046-01-14, SHA-256 018E13F0). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

Source: https://ssl.sh/roots/digicert-tls-ecc-p384-root-g5/
Last updated: 2026-11-10

DigiCert TLS ECC P384 Root G5 is a root CA certificate operated by DigiCert (ECDSA P-384, valid until 2046-01-14, SHA-256 018E13F0). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | DigiCert |
| Subject | CN=DigiCert TLS ECC P384 Root G5,O=DigiCert\, Inc.,C=US |
| SHA-256 | 018E13F0772532CF809BD1B17281867283FC48C6E13BE9C69812854A490C1B05 |
| SPKI SHA-256 | A02FAFA192C8CB81CB1341554F9C05B71CCA2A890B0D1298D683647C961EFBDF |
| Valid from | 2021-01-15 |
| Expires | 2046-01-14 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA384 |
| Serial number | 9E09365ACF7D9C8B93E1C0B042A2EF3 |
| SHA-1 (Windows thumbprint) | 17F3DE5E9F0F19E98EF61F32266E20C407AE30EE |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Included | Yes | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites; EV policy OIDs: 2.23.140.1.1; First included in: NSS 3.80 / Firefox 103; Inclusion bug: #1706228 |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication |

Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 20 intermediate CA certificates signed directly by DigiCert TLS ECC P384 Root G5: 20 currently valid, 0 expired and 0 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| DigiCert TLS ECC P384 Root G6 | DigiCert | 2036-10-07 | Valid | 1D5C0F11C5FBFBF4743936826E9ECFBEA7EFA2BB007ADC0F1BB78F1C41C70C32 |
| DigiCert Basic EV G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2033-01-18 | Valid | FDB76E78A450C0F3AF093D5186C3B28A1280567A0EC531CA5977FF4E616B35E3 |
| DigiCert Secure Site Pro G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2033-01-18 | Valid | D43B3FBC2E6715B33D3D7037200FA9D4181F97492C44DBEBA8FBAE9680D64CD0 |
| DigiCert Secure Site OV G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2033-01-18 | Valid | 9E561A4B486076C219F3C95387BF11670D72F6C4F0DCD9BBB47F59F5C142EF88 |
| DigiCert Secure Site EV G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2033-01-18 | Valid | 49C1F25A88B5B15A80C1A2DA11589111C5AD8E222104FDC49022FD6AEF1CF54D |
| DigiCert Secure Site Pro EV G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2033-01-18 | Valid | 290E698939A24F7B63AB14D0490DE92BEBEF6C1C2D3BE717F3775B71C1AB626D |
| DigiCert Basic OV G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2033-01-18 | Valid | 1D75A0B37B4AE11E883C97D3FF0DC5D84D93FE129C12DD78086C4A78DAF3F709 |
| GeoTrust EV G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2033-01-18 | Valid | 07F55A105E886D191FBD2253283E77B1FC1CCDCC9F26A3E6C7E69706A7593FEF |
| Encryption Everywhere G5 TLS ECC P-384 SHA384 2022 CA1 | DigiCert | 2032-11-02 | Valid | AD7F57AA3FC5EAF4310224A4750A97CD879DE1989D4B86AB08B7A28373BCB489 |
| DigiCert G5 TLS EU ECC P-384 SHA384 2022 CA1 | DigiCert | 2032-09-18 | Valid | 2C171064DBFA280A1F294F72E2A1FC24C86111B23723DB9375D3004B27E7B33B |
| GeoTrust G5 TLS ECC P-384 SHA384 2022 CA2 | DigiCert | 2032-07-27 | Valid | 66E795550B16497E7CF4566EC63B56660F28DBD551C357C526FBB0D7620A8112 |
| Thawte G5 TLS ECC P-384 SHA384 2022 CA2 | DigiCert | 2032-07-27 | Valid | 0215DB7E22D36D0E7535A12691A9EC0DC7F43D83AB580C0709711C1E7A9B55EC |
| GeoTrust G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2032-07-11 | Valid | E43BAAD78B78F9EEA6903E56F456DEC24BD9648C13AE02E2DE17A1F84F3D0807 |
| Thawte G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2032-07-11 | Valid | D604F0148A25D93BAB577D38705CBAAE2C4477DE7EB51D86A0F6B26584013D7A |
| DigiCert G5 TLS CN ECC P-384 SHA384 2022 CA1 | DigiCert | 2032-07-11 | Valid | 915EC8DCC237FA932CB0245A996FF3A711550A464214FD7512F225AA608061C8 |
| RapidSSL G5 TLS ECC P-384 SHA384 2022 CA1 | DigiCert | 2032-06-01 | Valid | D2A3D4ED9C05964F4A0984381933C5AB1E93E4A0BA7FCDD60940946D68BD6262 |
| Thawte G5 TLS EC P-384 SHA384 2022 CA1 | DigiCert | 2032-05-25 | Valid | 7F4E38B8B22F91DAF46ED5856D6E7F1180296FB152C026473C6328519D2AC99A |
| GeoTrust G5 TLS EC P-384 SHA384 2022 CA1 | DigiCert | 2032-05-25 | Valid | 72F104084DB7914BD8AFE6E347B9257ED4C1D7FC71D3F1E51F3CF47B739B386A |
| DigiCert G5 TLS ECC SHA384 2021 CA1 | DigiCert | 2031-04-13 | Valid | 97A073957C5812725757672F222690655A1407D71011EDFC8B2FADC5128911DA |
| DigiCert G5 TLS ECC SHA384 2021 CA1 | DigiCert | 2031-02-10 | Valid | E5A1C1919E3BEAEE5935A8485DDCE0E3F01A2618DB0F0793B3DB3D9AC2D967C7 |

## Cross-signed versions

3 certificate(s) in the CCADB have the same subject and public key as DigiCert TLS ECC P384 Root G5 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not DigiCert TLS ECC P384 Root G5, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| DigiCert Global Root G3 | DigiCert | 2036-03-30 | Valid | 3142F99D358D9B500E5CDD2DFF8F719A8CCECF589652334848522CCA807D0807 |
| DigiCert Global Root G3 | DigiCert | 2036-06-09 | Valid | 0AB3D50EF9CB924D65F77BA13E597C7C5B00E73AC165AA17D26B7F613BBACD91 |
| DigiCert Global Root G3 | DigiCert | 2037-09-20 | Revoked | D92E93252EABCA950870B94331990963A2DD5DB96D833C82B08E41AFD1719178 |

## What happens when it expires

DigiCert TLS ECC P384 Root G5 is valid until 2046-01-14, about 19.2 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is DigiCert TLS ECC P384 Root G5 trusted by Chrome, Firefox, Safari and Windows?**

Yes. As of 2026-11-10, Chrome, Mozilla (Firefox), Apple (Safari) and Microsoft (Windows) all trust it for TLS server authentication.

**When does DigiCert TLS ECC P384 Root G5 expire?**

On 2046-01-14, about 19.2 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has DigiCert TLS ECC P384 Root G5 issued?**

The CCADB lists 20: 20 valid, 0 expired and 0 revoked. The newest valid one is DigiCert TLS ECC P384 Root G6, valid until 2036-10-07.

**Is DigiCert TLS ECC P384 Root G5 cross-signed?**

Yes. The CCADB has 3 cross-certificate(s) with its subject and key, signed by DigiCert Global Root G3; 2 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).