# emSign Root CA - C1 root certificate (eMudhra)

> emSign Root CA - C1 is a root CA certificate operated by eMudhra (RSA 2048, valid until 2043-02-18, SHA-256 125609AA). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

Source: https://ssl.sh/roots/emudhra-emsign-root-ca-c1/
Last updated: 2026-11-10

emSign Root CA - C1 is a root CA certificate operated by eMudhra (RSA 2048, valid until 2043-02-18, SHA-256 125609AA). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

| Field | Value |
|---|---|
| CA owner | eMudhra |
| Subject | CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US |
| SHA-256 | 125609AA301DA0A249B97A8239CB6A34216F44DCAC9F3954B14292F2E8C8608F |
| SPKI SHA-256 | B7408B4D2BE0238BA37004DD34E276C6019BD2F24C9DB7D4980F5F6C359A4BCC |
| Valid from | 2018-02-18 |
| Expires | 2043-02-18 |
| Key | RSA 2048 |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | AECF00BAC4CF32F843B2 |
| SHA-1 (Windows thumbprint) | E72EF1DFFCB20928CF5DD4D56737B151CB864F01 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Removed | No | - | - |
| Apple | Not included | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Document Signing, Secure Email |

The CCADB lists EV policy OID 2.23.140.1.1 for this root, but Mozilla does not mark it as EV-enabled.

## Intermediate CAs issued by this root

The CCADB lists 16 intermediate CA certificates signed directly by emSign Root CA - C1: 16 currently valid, 0 expired and 0 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| UAE QTSP Qualified eSeal CA LP | eMudhra Technologies Limited | 2036-08-05 | Valid | E3473AECEF108B1EE6F49E177B25023605A0C041B1D97A9F59CFFC00D22E0251 |
| UAE QTSP Qualified eSignature CA NP-QSCD | eMudhra Technologies Limited | 2036-08-05 | Valid | DB9F48A53106A06A00472FF182914502FE5C816BBC4BB5468332396919BEE571 |
| UAE QTSP Device and Management CA | eMudhra Technologies Limited | 2036-08-05 | Valid | D9656F4E4D83F62783D9ADE60104EED90D9CC50C29A6EF0A78367751D2F8C748 |
| UAE QTSP Qualified eSignature CA (NP) | eMudhra Technologies Limited | 2036-08-05 | Valid | 8C5710BF1601919795673E9FF97F9C19ACC7FA478E9E99CB6CF5B612A96C697B |
| UAE QTSP Qualified eSeal CA LP-QSCD | eMudhra Technologies Limited | 2036-08-05 | Valid | 6B1EA2DEE0F34A7E53D64EBBF39C583DAF9418D83A5AA9E6258E4F2BE707B36E |
| UAE QTSP TSA Issuing CA | eMudhra Technologies Limited | 2036-08-05 | Valid | 407418904F71B2A0B2E35F45AD88C31125B1C52131D4F72FA821F83A471DC840 |
| UAE QTSP Validation Service CA | eMudhra Technologies Limited | 2036-08-05 | Valid | 3213CE37224C4E954DAAAEEDDA098EB708911D0548FD3E30ED8FFC1841BD5D65 |
| UAE QTSP Advanced CA | eMudhra Technologies Limited | 2036-08-05 | Valid | 029F54FDDC7EC492747037A524E9D6A13C80236D53487E75C4EDCC191EFE70BB |
| Soft-Net Secure Signing CA - C1 | eMudhra Technologies Limited | 2035-08-12 | Valid | CCEC157DA0F0BD58E3E8B584054FE0C44F04B4DD8C97B75B788D9140B05142F7 |
| emSign Time Stamping CA - C1 | eMudhra Technologies Limited | 2035-08-12 | Valid | 4D15E5199D88EAB1838E06EBA08BC690E971B4B1FCD77A6530E9C06F17FDF477 |
| emSign SSL CA - C1 | eMudhra Technologies Limited | 2033-02-18 | Valid | F91AACA0E4E533747A0880BFCF6F26720DC1D05494C3938DA6802290D5A09B32 |
| emSign EV SSL CA - C1 | eMudhra Technologies Limited | 2033-02-18 | Valid | F6F159286A1401DE5397E21A0090534A85F5E7B9F98FD4A5A47B1DFFD4BFDED4 |
| emSign Device CA - C1 | eMudhra Technologies Limited | 2033-02-18 | Valid | D034B18751BEE10AAAF94C2F14350D3F654E5B934D0DDA592B31E58187A48952 |
| emSign Class 3 CA - C1 | eMudhra Technologies Limited | 2033-02-18 | Valid | 69B0DD09B98F36A9CC7BD7FFE8A00DCD319A5FC947C9C8AF72C92894D8E81092 |
| emSign Class 1 CA - C1 | eMudhra Technologies Limited | 2033-02-18 | Valid | 0EF7B863FAABC384A694FF632DAAF9BD31CED23E9246559A59ECD7472754CCE6 |
| emSign Class 2 CA - C1 | eMudhra Technologies Limited | 2033-02-18 | Valid | 05B30B3FC44F8575334BD812EF9FA8A52A75743E19BC35A5BE3912ECA62C4669 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as emSign Root CA - C1 with a different issuer, so a client has to carry emSign Root CA - C1 itself in its root store to trust it.


## What happens when it expires

emSign Root CA - C1 is valid until 2043-02-18, about 16.3 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is emSign Root CA - C1 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Microsoft trust it for TLS server authentication; Chrome, Mozilla, Apple do not.

**When does emSign Root CA - C1 expire?**

On 2043-02-18, about 16.3 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has emSign Root CA - C1 issued?**

The CCADB lists 16: 16 valid, 0 expired and 0 revoked. The newest valid one is UAE QTSP Qualified eSeal CA LP, valid until 2036-08-05.

**Is emSign Root CA - C1 cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).