# Hellenic Academic and Research Institutions RootCA 2015 root certificate (HARICA)

> Hellenic Academic and Research Institutions RootCA 2015 is a root CA certificate operated by HARICA (RSA 4096, valid until 2040-06-30, SHA-256 A040929A). As of the latest CCADB data it is trusted for TLS server authentication by 3 of 4 major root stores: Mozilla, Apple, Microsoft.

Source: https://ssl.sh/roots/harica-hellenic-academic-and-research-institutions-rootca-2015/
Last updated: 2026-11-10

Hellenic Academic and Research Institutions RootCA 2015 is a root CA certificate operated by HARICA (RSA 4096, valid until 2040-06-30, SHA-256 A040929A). As of the latest CCADB data it is trusted for TLS server authentication by 3 of 4 major root stores: Mozilla, Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | HARICA |
| Subject | CN=Hellenic Academic and Research Institutions RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR |
| SHA-256 | A040929A02CE53B4ACF4F2FFC6981CE4496F755E6D45FE0B2A692BCD52523F36 |
| SPKI SHA-256 | 50CC86BA96DB3263C79A43EAD07553D9F56659E6907E72D8C026637A1CDC85DC |
| Valid from | 2015-07-07 |
| Expires | 2040-06-30 |
| Key | RSA 4096 |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 0 |
| SHA-1 (Windows thumbprint) | 010C0695A6981914FFBF5FC6B0B695EA29E912A6 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites, Email; EV policy OIDs: 2.23.140.1.1; First included in: NSS 3.25 / Firefox 49; Inclusion bug: #1690054 |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth, emailProtection |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Document Signing, Secure Email, Time Stamping; Not-before cutoff: 2025-09-15 (Secure Email) |

Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 95 intermediate CA certificates signed directly by Hellenic Academic and Research Institutions RootCA 2015: 50 currently valid, 3 expired and 42 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| HARICA Time-stamping Certificates RSA 2 | HARICA | 2038-01-08 | Valid | 668A4E057F27DF063D0D37C0A6142AAAF786F405DFC5A30F7A7DD5B02DD5A922 |
| HARICA Code Signing RSA Root CA 2021 | HARICA | 2034-07-18 | Valid | 2EDB3472C14ABB088840B8CD3EA70A65A620F4D2C54A05291DA786F685AFE8F4 |
| HARICA Code Signing RSA 2 | HARICA | 2037-06-25 | Valid | 9B92D7AA0D29B18AFE9E7A66A1BB1A332361B5EE061964A2FC12085093C0D799 |
| HARICA Institutional TLS RSA | HARICA | 2037-01-24 | Valid | C5B4ABBD3BAE38114A3A823A8AC4CD31C45465B7C1CEBD84F36D72054AFBE8BB |
| ACER Client RSA SubCA R3 | HARICA | 2037-01-24 | Valid | B8355501E3658AAA20986EFB67A1064ED9E9ACE94CA9E87C8BEE93946E0333E6 |
| HARICA TLS RSA Root CA 2021 | HARICA | 2029-08-31 | Valid | 4ACD8DC6020A545A858943A553B5E0F3FC5B859AEA1746650D69CF1210F956D8 |
| Ministry of Digital Governance (Hellenic Republic) SubCA R1 | HARICA | 2028-09-01 | Valid | 6014F88C181CA075E2F7B82A1F518FA604A22486ABB72A76591962FB08646C63 |
| HARICA Institutional Client SubCA R1 | HARICA | 2035-07-05 | Valid | FEE2CD981C00C5CF3B0A47F3F4BC5DB1E6F4307AD45CE78F998F9BCBD82478EA |
| Greek Federation of Judicial Officers Client RSA SubCA R4 | HARICA | 2028-07-06 | Valid | 8884A7E1A5E7FED19E60E3598E10EF2105ADFF02A0B91DF227069097F9DFDB62 |
| University of West Attica TLS RSA SubCA R1 | HARICA | 2028-05-18 | Valid | 1E3349CD366A93E59EF4152A1E483DAC6076184C5D46D4CDA00E6093EFC9E6A3 |
| HARICA Qualified Time Stamping RSA SubCA R1 | HARICA | 2035-05-17 | Valid | 1D3BDB9882F3D16AD807903DA797EC4ABAC27365D9B3C9B0E227B6B7E265972A |
| Panteion Univ. of Social and Political Sciences TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | F0043E9FEFB37AEA794E690437DC239D6BD2C5CA0FB58A12244555A1A8A2A01A |
| University of Western Macedonia TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | EFB44844F37EE6DE3FB4CC8D2C0C832FC8FEEBA9506237E0D1FC7AD4574A4CCA |
| Greek Universities Network TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | DC9993DC33A71FD95808787D19A4B55704E601D57EBCEACC8802C78B5C36F5C7 |
| Ionian University TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | DA0C4981F6336E06C129F7E8143B2A54AA85A14A63CA44FCE2CDDC69EEE788C9 |
| Greek School Network TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | CFDFEF037CFDBD6BB0E311E9BB281CA60271C5DAE2695312033806FA4B0E94B7 |
| Harokopio University TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | BA425122F31D9BAE7CBE1E7FA2FF437ADF283E014333485F7691CB856AEC776A |
| HEAL-LINK Hellenic Academic Libraries Link TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | 8C0994B2AED0085FE542813EE03C4B2D732ECDCC257AE6453114C6C875933BD4 |
| University of Macedonia TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | 6539235A5A1F94180C5233EAF8A5D67102DEAA16C0751AEF35B3E67CE5607F29 |
| University of Crete TLS RSA SubCA R1 | HARICA | 2028-03-22 | Valid | 5DABDA046272EEC89ECB95A6297DBA910D0144F7EEB5814D073AE54A4A8CF646 |

## Cross-signed versions

1 certificate(s) in the CCADB have the same subject and public key as Hellenic Academic and Research Institutions RootCA 2015 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not Hellenic Academic and Research Institutions RootCA 2015, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| Hellenic Academic and Research Institutions RootCA 2011 | HARICA | 2024-07-17 | Expired | F28A97AC28CFED10A93A7F078F978C8F6204C9D8451F745D5FEBBD6E0B6D4D7C |

## What happens when it expires

Hellenic Academic and Research Institutions RootCA 2015 is valid until 2040-06-30, about 13.6 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is Hellenic Academic and Research Institutions RootCA 2015 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Mozilla, Apple, Microsoft trust it for TLS server authentication; Chrome do not.

**When does Hellenic Academic and Research Institutions RootCA 2015 expire?**

On 2040-06-30, about 13.6 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has Hellenic Academic and Research Institutions RootCA 2015 issued?**

The CCADB lists 95: 50 valid, 3 expired and 42 revoked. The newest valid one is HARICA Time-stamping Certificates RSA 2, valid until 2038-01-08.

**Is Hellenic Academic and Research Institutions RootCA 2015 cross-signed?**

Yes. The CCADB has 1 cross-certificate(s) with its subject and key, signed by Hellenic Academic and Research Institutions RootCA 2011; 0 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).