# emSign Root TLS CA - G3 root certificate (eMudhra)

> emSign Root TLS CA - G3 is a root CA certificate operated by eMudhra (ECDSA P-384, valid until 2049-02-07, SHA-256 7DD78D5F). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

Source: https://ssl.sh/roots/emudhra-emsign-root-tls-ca-g3/
Last updated: 2026-11-10

emSign Root TLS CA - G3 is a root CA certificate operated by eMudhra (ECDSA P-384, valid until 2049-02-07, SHA-256 7DD78D5F). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

| Field | Value |
|---|---|
| CA owner | eMudhra |
| Subject | CN=emSign Root TLS CA - G3,O=eMudhra Technologies Limited,C=IN |
| SHA-256 | 7DD78D5F4F13459A83DFF9ABBBA62EDBAF6F2D102BF257FD712F4D9F2746ED8D |
| SPKI SHA-256 | C619E4780ED8E0ABEDA24AD732567DE4383A7EA941338F6D1A7D1B49AC792FE9 |
| Valid from | 2024-02-08 |
| Expires | 2049-02-07 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA384 |
| Serial number | E760672F143459FC8FE0AB0BC05E394 |
| SHA-1 (Windows thumbprint) | 39D3236E4A609AB6190CBFA1AD02B3CC61DFC2C3 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Not included | No | - | - |
| Mozilla | Not included | No | - | - |
| Apple | Not included | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication |

The CCADB lists no EV policy OID for emSign Root TLS CA - G3.

## Intermediate CAs issued by this root

The CCADB lists 16 intermediate CA certificates signed directly by emSign Root TLS CA - G3: 7 currently valid, 0 expired and 9 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| InCommon Intermediate CA - EVG3C | eMudhra Technologies Limited | 2029-04-07 | Valid | 5F2F050F9CDD928FE50102244733CBA7EA72204D9A7686949CE59E402AD1AAB9 |
| InCommon Intermediate CA - OVG3C | eMudhra Technologies Limited | 2029-04-07 | Valid | 566B3AF3CB6663A9F9E21EEF820889C2D1A4EA2F7DF0B7BB0D5060249870FA08 |
| InCommon Intermediate CA - DVG3C | eMudhra Technologies Limited | 2029-04-07 | Valid | 3460C02F0B4B06C2739CB0DE17B41062B94515D837652AEBFF77AE87E0930CFF |
| EM EV TLS CA - G3A-1 | eMudhra Technologies Limited | 2040-05-28 | Valid | BA0A3DA706F47DAC1A9C33C4EE1E4D86B726EF48E70D4319F3C949EC673A1975 |
| EM DV TLS CA - G3A-1 | eMudhra Technologies Limited | 2040-05-28 | Valid | 4896D51F6537A5326272C412BC75990E15D4F5ECDC2946C19776923B8E169E93 |
| EM OV TLS CA - G3A-1 | eMudhra Technologies Limited | 2040-05-28 | Valid | 259FF0963A0665BF40D92E05E95B960CCB423DBD117482AE647BC7FD5F5CE644 |
| emSign TLS CA - G3 | eMudhra Technologies Limited | 2039-07-08 | Valid | 04E6DEA261B8720E0525E9DA23282100352BDEBC119CFC3DBD812C3D68A2BCDD |
| EM EV TLS CA - G3B | eMudhra Technologies Limited | 2040-04-28 | Revoked | E7568FE6E12331F4FD7DE61DA4C7559D0F8EB192A218D4741A3BA75184333838 |
| EM OV TLS CA - G3C | eMudhra Technologies Limited | 2040-04-28 | Revoked | CB6E15165AC802E9B3F993F16C25D41F4E81C21EBDE71AE1B012AC00BF9C7C3F |
| EM DV TLS CA - G3A | eMudhra Technologies Limited | 2040-04-28 | Revoked | C83980CF0440CDEA950BE2C13CC1090F04B8D77E0D50E977588DBDDB11CC6DA9 |
| EM OV TLS CA - G3B | eMudhra Technologies Limited | 2040-04-28 | Revoked | 98B896625C0C230ADEEC3EB2CF6AAD5001ECF9156A68644E82374CE5833BC25B |
| EM EV TLS CA - G3A | eMudhra Technologies Limited | 2040-04-28 | Revoked | 8344188BCBD9CECB9397436878DE8918D6D4521EFDB6BDE2A30E520847F22901 |
| EM OV TLS CA - G3A | eMudhra Technologies Limited | 2040-04-28 | Revoked | 775BB88FB7FECCCA55B5B216DF40A23F52129EF647EA2077CADDEE798DEF9EB0 |
| EM EV TLS CA - G3C | eMudhra Technologies Limited | 2040-04-28 | Revoked | 432EC25F0D28DE9006D97BF752F17BBB2CD41F669933FCB072D9A1148D0261F3 |
| EM DV TLS CA - G3B | eMudhra Technologies Limited | 2040-04-28 | Revoked | 42C4ACCD12C4F59597925E1A08A7A90102608543809308D50EC427E118BA1493 |
| EM DV TLS CA - G3C | eMudhra Technologies Limited | 2040-04-28 | Revoked | 0164D7CEAE5BB909C272AF151FF44B1177AE9B47D9424B94F1D9558C30934D19 |

## Cross-signed versions

1 certificate(s) in the CCADB have the same subject and public key as emSign Root TLS CA - G3 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not emSign Root TLS CA - G3, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| emSign ECC Root CA - G3 | eMudhra Technologies Limited | 2039-07-09 | Valid | 3094025792039A68AF6E553686410BDAB7C0D4A36B9084CBA64202E35D6EBBDD |

## What happens when it expires

emSign Root TLS CA - G3 is valid until 2049-02-07, about 22.2 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is emSign Root TLS CA - G3 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Microsoft trust it for TLS server authentication; Chrome, Mozilla, Apple do not.

**When does emSign Root TLS CA - G3 expire?**

On 2049-02-07, about 22.2 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has emSign Root TLS CA - G3 issued?**

The CCADB lists 16: 7 valid, 0 expired and 9 revoked. The newest valid one is InCommon Intermediate CA - EVG3C, valid until 2029-04-07.

**Is emSign Root TLS CA - G3 cross-signed?**

Yes. The CCADB has 1 cross-certificate(s) with its subject and key, signed by emSign ECC Root CA - G3; 1 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).