# Hellenic Academic and Research Institutions ECC RootCA 2015 root certificate (HARICA)

> Hellenic Academic and Research Institutions ECC RootCA 2015 is a root CA certificate operated by HARICA (ECDSA P-384, valid until 2040-06-30, SHA-256 44B545AA). As of the latest CCADB data it is trusted for TLS server authentication by 3 of 4 major root stores: Mozilla, Apple, Microsoft.

Source: https://ssl.sh/roots/harica-hellenic-academic-and-research-institutions-ecc-rootca-2015/
Last updated: 2026-11-10

Hellenic Academic and Research Institutions ECC RootCA 2015 is a root CA certificate operated by HARICA (ECDSA P-384, valid until 2040-06-30, SHA-256 44B545AA). As of the latest CCADB data it is trusted for TLS server authentication by 3 of 4 major root stores: Mozilla, Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | HARICA |
| Subject | CN=Hellenic Academic and Research Institutions ECC RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR |
| SHA-256 | 44B545AA8A25E65A73CA15DC27FC36D24C1CB9953A066539B11582DC487B4833 |
| SPKI SHA-256 | BB52086D0639E8DB332775AC8F4E8435D92CEB00F4E24F28FC0EABE240772E80 |
| Valid from | 2015-07-07 |
| Expires | 2040-06-30 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA256 |
| Serial number | 0 |
| SHA-1 (Windows thumbprint) | 9FF1718D92D59AF37D7497B4BC6F84680BBAB666 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites, Email; EV policy OIDs: 2.23.140.1.1; First included in: NSS 3.25 / Firefox 49; Inclusion bug: #1690054 |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth, emailProtection |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Secure Email, Time Stamping; Not-before cutoff: 2025-09-15 (Secure Email) |

Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 25 intermediate CA certificates signed directly by Hellenic Academic and Research Institutions ECC RootCA 2015: 15 currently valid, 0 expired and 10 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| HARICA Code Signing ECC 2 | HARICA | 2037-06-25 | Valid | F2CB382030F2910E8D5E4D1BA98992AFA7635BFECB5F76BEF53FD822ED691F0E |
| HARICA Code Signing ECC Root CA 2021 | HARICA | 2034-06-26 | Valid | AC70544B35F91FB5CAD41698ABDD6825FCDEBDF6E082100190B8F1F437F92195 |
| HARICA Institutional TLS ECC | HARICA | 2037-01-24 | Valid | B67E4E92286E168A916F3DBCADC3F0B83DBC0ADBE43F995C1FAAD316DDEC75D8 |
| HARICA TLS ECC Root CA 2021 | HARICA | 2029-08-31 | Valid | 50E27F90EB6AF495B0E6EEB655CC89444C27D3C95B6823FA02ABDC95F1636AE1 |
| HARICA Administration Client ECC SubCA R3 | HARICA | 2028-07-06 | Valid | 978011D478E7BC4C3BCBB2F2659759278AA41A17F53F0AED132726281CE34BAF |
| HARICA QWAC ECC SubCA R1 | HARICA | 2035-02-23 | Valid | BA0312F7B72F6B64B4CCEE34B5F628CF65A1F3B9F16B8DFE7ADA90C54E475A1C |
| HARICA EV TLS ECC SubCA R1 | HARICA | 2035-02-23 | Valid | 701EB23F95564CD5569CD20E5F05C2888900BAE9BA03ABF5ABE57BFE04B54A60 |
| HARICA EV Code Signing ECC SubCA R1 | HARICA | 2035-02-23 | Valid | 523EC59EC9E637E635F8BE2954D56D7624371B10BAEC6D123C11D84BFD7D5261 |
| HARICA Administration SSL ECC SubCA R2 | HARICA | 2027-03-05 | Valid | 3E1479804765A62BB7BD4F0DDEBB55A946A2063CD2882F05461B1754F1B667B1 |
| HARICA Qualified Legal Entities ECC SubCA R2 | HARICA | 2034-03-02 | Valid | DD5BAC4F1BB5356AE98D3F0C8E24C59DF84199A56F78F1C161196AAD70283094 |
| HARICA S/MIME ECC SubCA R2 | HARICA | 2034-03-02 | Valid | 9CD07290E8BEDD99CF7397F94CB012B22EEC13DA52ED94F3017A2EA4146EA98D |
| HARICA Qualified Natural Entities ECC SubCA R2 | HARICA | 2034-03-02 | Valid | 4D961AEE0D2DD0ADF433B4AAC261CE5871665CF39FCA1B4838AE6620DA685046 |
| HARICA Client Authentication ECC SubCA R2 | HARICA | 2034-03-02 | Valid | 4D63F8747A9680F81882B62D0FA993C33581D314C5B596FA373DF92B2C65D4FF |
| HARICA SSL ECC SubCA R2 | HARICA | 2034-03-02 | Valid | 11D5EF460DAB3582B742123127127D54040FB1C206E26F025CB58458F225111A |
| HARICA Code Signing ECC SubCA R2 | HARICA | 2034-03-02 | Valid | 013932465EE4FC2448D0C9AEEEA049DE9063AF5E773E8A501AB626F0957E1345 |
| HARICA Administration Client ECC SubCA R2 | HARICA | 2027-03-05 | Revoked | 7A52945F5902D53C0DB76A200EB9F85C7C424B23F939FFE140C5DBD0B1F2C7D8 |
| HARICA Administration SSL ECC SubCA R1 | HARICA | 2027-03-04 | Revoked | B5239421E33451AA60881C9AC5978BFDBE5A16B26F6B157DDB17DD05F4F03074 |
| HARICA Administration Client ECC SubCA R1 | HARICA | 2027-03-04 | Revoked | 7CB888EF740DCBFC0C20BDA44F2C2619F6D0D4598FB932D037DAF278077773A5 |
| HARICA Qualified Legal Entities ECC SubCA R1 | HARICA | 2034-02-16 | Revoked | EEABE2819DDF4E7C54CC5F3FE5A54ED1074A7F1453598EC435EAF45C87C1CF62 |
| HARICA Qualified Natural Entities ECC SubCA R1 | HARICA | 2034-02-16 | Revoked | 92A7CDB216070F12DCC8A5986DC42843E9399B4CC7B624F92A0A1202ECBF3B50 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as Hellenic Academic and Research Institutions ECC RootCA 2015 with a different issuer, so a client has to carry Hellenic Academic and Research Institutions ECC RootCA 2015 itself in its root store to trust it.


## What happens when it expires

Hellenic Academic and Research Institutions ECC RootCA 2015 is valid until 2040-06-30, about 13.6 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is Hellenic Academic and Research Institutions ECC RootCA 2015 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Mozilla, Apple, Microsoft trust it for TLS server authentication; Chrome do not.

**When does Hellenic Academic and Research Institutions ECC RootCA 2015 expire?**

On 2040-06-30, about 13.6 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has Hellenic Academic and Research Institutions ECC RootCA 2015 issued?**

The CCADB lists 25: 15 valid, 0 expired and 10 revoked. The newest valid one is HARICA Code Signing ECC 2, valid until 2037-06-25.

**Is Hellenic Academic and Research Institutions ECC RootCA 2015 cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).