# Go Daddy Root Certificate Authority - G2 root certificate (GoDaddy)

> Go Daddy Root Certificate Authority - G2 is a root CA certificate operated by GoDaddy (RSA 2048, valid until 2037-12-31, SHA-256 45140B32). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

Source: https://ssl.sh/roots/godaddy-go-daddy-root-ca-g2/
Last updated: 2026-11-10

Go Daddy Root Certificate Authority - G2 is a root CA certificate operated by GoDaddy (RSA 2048, valid until 2037-12-31, SHA-256 45140B32). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | GoDaddy |
| Subject | CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US |
| SHA-256 | 45140B3247EB9CC8C5B4F0D7B53091F73292089E6E5A63E2749DD3ACA9198EDA |
| SPKI SHA-256 | 2A8F2D8AF0EB123898F74C866AC3FA669054E23C17BC7A95BD0234192DC635D0 |
| Valid from | 2009-09-01 |
| Expires | 2037-12-31 |
| Key | RSA 2048 |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 0 |
| SHA-1 (Windows thumbprint) | 47BEABC922EAE80E78783462A79F45C254FDE68B |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Included | Yes | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites; EV policy OIDs: 2.16.840.1.114413.1.7.23.3; First included in: NSS 3.12.10 / Firefox 6.0; Inclusion bug: #527056 |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth, emailProtection |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Encrypting File System, IP Security Tunnel Termination, IP Security User, Secure Email, Time Stamping; Not-before cutoff: 2026-05-19 (Code Signing, Secure Email) |

Mozilla treats it as an EV root for policy OID 2.16.840.1.114413.1.7.23.3.

## Intermediate CAs issued by this root

The CCADB lists 5 intermediate CA certificates signed directly by Go Daddy Root Certificate Authority - G2: 4 currently valid, 0 expired and 1 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| GoDaddy TLS Root CA - R1 | GoDaddy | 2037-12-31 | Valid | 7BCB0F2F2D1031A6AF8D61BAA835D2835A3B8BCC26D94A3B048B1655FB81298C |
| Go Daddy Secure Extended Validation Code Signing CA - G2 | GoDaddy | 2035-05-01 | Valid | 9EFC910271094B886BD9A8FC9E394DBF2AE514778CB373544085AF815CABFE2D |
| Go Daddy Secure Code Signing Certificate Authority - G2 | GoDaddy | 2034-04-01 | Valid | EF356CC299AA637916C81A48891B5BA2F333A2064D93A89BA14F63A14AA6B251 |
| Go Daddy Secure Certificate Authority - G2 | GoDaddy | 2031-05-03 | Valid | 973A41276FFD01E027A2AAD49E34C37846D3E976FF6A620B6712E33832041AA6 |
| GoDaddy Secure Certificate Authority - G5 | GoDaddy | 2042-06-21 | Revoked | 880FBC44FE71AA1BE40DB130917B1BAEC1BD889B2B3D7478EDA04728667E8B44 |

## Cross-signed versions

1 certificate(s) in the CCADB have the same subject and public key as Go Daddy Root Certificate Authority - G2 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not Go Daddy Root Certificate Authority - G2, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| Go Daddy Class 2 Certification Authority | GoDaddy | 2031-05-30 | Valid | 3A2FBE92891E57FE05D57087F48E730F17E5A5F53EF403D618E5B74D7A7E6ECB |

## What happens when it expires

Go Daddy Root Certificate Authority - G2 is valid until 2037-12-31, about 11.1 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is Go Daddy Root Certificate Authority - G2 trusted by Chrome, Firefox, Safari and Windows?**

Yes. As of 2026-11-10, Chrome, Mozilla (Firefox), Apple (Safari) and Microsoft (Windows) all trust it for TLS server authentication.

**When does Go Daddy Root Certificate Authority - G2 expire?**

On 2037-12-31, about 11.1 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has Go Daddy Root Certificate Authority - G2 issued?**

The CCADB lists 5: 4 valid, 0 expired and 1 revoked. The newest valid one is GoDaddy TLS Root CA - R1, valid until 2037-12-31.

**Is Go Daddy Root Certificate Authority - G2 cross-signed?**

Yes. The CCADB has 1 cross-certificate(s) with its subject and key, signed by Go Daddy Class 2 Certification Authority; 1 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).