# GLOBALTRUST 2020 root certificate (e-commerce monitoring (GLOBALTRUST))

> GLOBALTRUST 2020 is a root CA certificate operated by e-commerce monitoring (GLOBALTRUST) (RSA 4096, valid until 2040-06-10, SHA-256 9A296A51). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

Source: https://ssl.sh/roots/globaltrust-2020/
Last updated: 2026-11-10

GLOBALTRUST 2020 is a root CA certificate operated by e-commerce monitoring (GLOBALTRUST) (RSA 4096, valid until 2040-06-10, SHA-256 9A296A51). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

| Field | Value |
|---|---|
| CA owner | e-commerce monitoring (GLOBALTRUST) |
| Subject | CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT |
| SHA-256 | 9A296A5182D1D451A2E37F439B74DAAFA267523329F90F9A0D2007C334E23C9A |
| SPKI SHA-256 | FEE8AF929175687F4638A3FC983DB8ECD0E5E2A83E737F3FB77B4C22FCBAC0A6 |
| Valid from | 2020-02-10 |
| Expires | 2040-06-10 |
| Key | RSA 4096 |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 5A4BBD5AFB4F8A5BFA65E5 |
| SHA-1 (Windows thumbprint) | D067C11351010CAAD0C76A65373116264F5371A2 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Removed | No | - | - |
| Apple | Blocked | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Document Signing, Secure Email, Time Stamping |

The CCADB lists EV policy OID 2.23.140.1.1, 2.23.140.1.3 for this root, but Mozilla does not mark it as EV-enabled.

## Intermediate CAs issued by this root

The CCADB lists 12 intermediate CA certificates signed directly by GLOBALTRUST 2020: 11 currently valid, 0 expired and 1 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| GLOBALTRUST 2020 AATL 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | EB6CAF5650B44E2C962AAFBE01B4359B11F77329784ECD715A6EC43437C2B64C |
| GLOBALTRUST 2020 CODESIGNING EV 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | F2438A6E12295054348E64D1DF1C572F248F52F4BB4CEB7FA4DBF16148A6D563 |
| GLOBALTRUST 2020 GOVERNMENT 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | BA0555CB3C41A0063B767A85414EDD99B64AEEDEDA0430B75983F7E4387FA95A |
| GLOBALTRUST 2020 ADVANCED 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | 96D3B4C2FC953B3C12148BDFE9F20A265937B399CFAEFAF68D6273D876B58B43 |
| GLOBALTRUST 2020 CODESIGNING 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | 8AEAC99EF365CD48C311CD09BFEA889BE99D5A8275A5B820EEC906243612A436 |
| GLOBALTRUST 2020 CLIENT 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | 6DCA83EF586C940A2040ABDD900CAF0E00A014851F7F9C46EBA20BEDCC07BED7 |
| GLOBALTRUST 2020 QUALIFIED 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | 16A84116D5D22CA0329EA360927B67EDC61D9583F6846577A3F38734BB459D88 |
| GLOBALTRUST 2020 SERVER QUALIFIED EV 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | FE95A24E7F94978E58D99350AB7AB789774A987CD25187C128C191D207523BB1 |
| GLOBALTRUST 2020 COMPANY CLIENT 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | B868C8A09F1766D3289CE2CAC27488254A7310996C1B049C42C9EADD1A5ED621 |
| GLOBALTRUST 2020 SERVER OV 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | AF55B372EA64FF3080F31F8429913816DEABAF390FC5D2AC271E9A9F62D8F575 |
| GLOBALTRUST 2020 SERVER EV 1 | e-commerce monitoring GmbH | 2040-06-10 | Valid | A5B27D844A0ECB68F1D065723202A2F07C667DE96B84E68A9AF234669397D6C4 |
| GLOBALTRUST 2020 CODESIGNING-EV 1 | e-commerce monitoring GmbH | 2040-06-10 | Revoked | 1C91F15BC2E12CCA9CDB4DEFFBEBB16E94553B3E14B79CC5AA8CEC05EDB05D37 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as GLOBALTRUST 2020 with a different issuer, so a client has to carry GLOBALTRUST 2020 itself in its root store to trust it.


## What happens when it expires

GLOBALTRUST 2020 is valid until 2040-06-10, about 13.6 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is GLOBALTRUST 2020 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Microsoft trust it for TLS server authentication; Chrome, Mozilla, Apple do not.

**When does GLOBALTRUST 2020 expire?**

On 2040-06-10, about 13.6 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has GLOBALTRUST 2020 issued?**

The CCADB lists 12: 11 valid, 0 expired and 1 revoked. The newest valid one is GLOBALTRUST 2020 AATL 1, valid until 2040-06-10.

**Is GLOBALTRUST 2020 cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).