# Microsec e-Szigno Root CA 2009 root certificate (Microsec Ltd.)

> Microsec e-Szigno Root CA 2009 is a root CA certificate operated by Microsec Ltd. (RSA 2048, valid until 2029-12-30, SHA-256 3C5F81FE). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

Source: https://ssl.sh/roots/microsec-e-szigno-root-ca-2009/
Last updated: 2026-11-10

Microsec e-Szigno Root CA 2009 is a root CA certificate operated by Microsec Ltd. (RSA 2048, valid until 2029-12-30, SHA-256 3C5F81FE). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | Microsec Ltd. |
| Subject | 1.2.840.113549.1.9.1=info@e-szigno.hu,CN=Microsec e-Szigno Root CA 2009,O=Microsec Ltd.,L=Budapest,C=HU |
| SHA-256 | 3C5F81FEA5FAB82C64BFA2EAECAFCDE8E077FC8620A7CAE537163DF36EDBF378 |
| SPKI SHA-256 | 616167201433AEA6C8E5E3070AFCAF6749188F814BD1ABB179AE8DAD3ABF26EC |
| Valid from | 2009-06-16 |
| Expires | 2029-12-30 |
| Key | RSA 2048 |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | C27E43044E473F19 |
| SHA-1 (Windows thumbprint) | 89DF74FE5CF40F4A80F9E3377D54DA91E101318E |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Included | Yes | 2026-09-30 | - |
| Mozilla | Included | Yes | - | Trust bits: Websites, Email; EV policy OIDs: not EV-enabled; First included in: NSS 3.12.8 / Firefox 3.6.12; Inclusion bug: #510506 |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth, emailProtection |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Encrypting File System, IP Security Tunnel Termination, IP Security User, Secure Email, Time Stamping |

Chrome stops trusting TLS certificates under this root whose SCTs are dated after 2026-09-30 (sct_not_after). The CCADB lists no EV policy OID for Microsec e-Szigno Root CA 2009.

## Intermediate CAs issued by this root

The CCADB lists 54 intermediate CA certificates signed directly by Microsec e-Szigno Root CA 2009: 33 currently valid, 9 expired and 12 revoked (revoked includes those whose parent was revoked). 1 of the valid ones run past the expiry date of the root itself (2029-12-30).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| e-Szigno TLS Root CA 2023 | Microsec Ltd. | 2029-12-30 | Valid | 35328CDA9F14FEB62AC0CCAEE1B10101FD6F44ADD85A51311EA174FD361F4613 |
| e-Szigno RSA TLS Root CA 2025 | Microsec Ltd. | 2029-12-30 | Valid | 53B6A499FCC6C04A18A56B574584484072E4A306E07B4DD72D31B105453A1300 |
| e-Szigno SMIME CA 2023 | Microsec Ltd. | 2028-02-12 | Valid | F49F1A6386E921E78F40FECE225635246586666E3BAD3E0FA047BCC9769B06FF |
| e-Szigno Qualified TLS CA 2023 | Microsec Ltd. | 2028-02-12 | Valid | D00EC5B7B56EF27F65335C0B680B80D7DD1408FF7FD9E985F3184B1C6D0E8BB3 |
| e-Szigno OV TLS CA 2023 | Microsec Ltd. | 2028-02-12 | Valid | BC75DB1DF88E0A11C1D432BC31CCF3369CDFBBC48BEDAC9AC41F31F03DEDE8A0 |
| e-Szigno Class2 SSL CA 2017 | Microsec Ltd. | 2028-02-12 | Valid | AB5719FE2CAC8FA5F97A1AE086D863C3D9A1023359299882C4AFA81E207BB1CA |
| e-Szigno Class3 SSL CA 2017 | Microsec Ltd. | 2028-02-12 | Valid | 8D2EC30151183E520CCF6AACCDB74565324F9CE6043C87C268BD26FEC197908F |
| e-Szigno Qualified SMIME CA 2023 | Microsec Ltd. | 2028-02-12 | Valid | 6E6D7A29D18E69699D8A25B29F28957B79202EE01CB12A6A12AF6F67C1A0999B |
| e-Szigno Online SSL CA 2017 | Microsec Ltd. | 2028-02-12 | Valid | 5576394132B1074F4FB58AC5AD59CABA10FD69D783D1747C94C00551992C9134 |
| e-Szigno DV TLS CA 2023 | Microsec Ltd. | 2028-02-12 | Valid | 2E3A5E1D3D84EA50D278DA47907914049082B5ECAA10175E10CA7FA8FC381B74 |
| e-Szigno Qualified TLS CA 2018 | Microsec Ltd. | 2028-02-12 | Valid | 23596672BF5A6C554737EF12C544FE88793F76C3C1F3CDE19B6A25D90C0E2042 |
| e-Szigno OV TLS CA 2025 | Microsec Ltd. | 2028-01-05 | Valid | D733903EBB84E2175FA1B8971840DFABF630B2C0C434D6DC9045DD19B3B95482 |
| e-Szigno DV TLS CA 2025 | Microsec Ltd. | 2028-01-05 | Valid | 9BD81C0752E0C4DBC839D22268C59FD25C819992C039A9BC3736B2E178E145BA |
| e-Szigno Qualified TLS CA 2025 | Microsec Ltd. | 2028-01-05 | Valid | 4EF7E47B30C08FCB1692B9B7A6D8F3A9E341C00FB5D4F58716BFB37DEA6437CC |
| e-Szigno TSA CA 2020 | Microsec Ltd. | 2029-09-29 | Valid | 7731FE893FD5461AD2BFAFBADC530CF69B6DA5095E3AEE0FF82EF54ADD4B8B57 |
| Qualified KET e-Szigno CA 2018 | Microsec Ltd. | 2029-12-29 | Valid | D9E445B22C6FCB37B296FCD1331486569651A8DB98071753FEFC73D2C97BF732 |
| Class3 KET e-Szigno CA 2018 | Microsec Ltd. | 2029-12-29 | Valid | 7BCF1C8A12EE0B2854A1B41070652B0325E7D0C20B9C44D4ACE9C643387F1431 |
| Qualified e-Szigno TLS CA 2018 | Microsec Ltd. | 2029-12-29 | Valid | F7C7E28FB5E79F314AAAC6BBBA932F15E1A72069F435D4C9E707F93CA1482EE3 |
| Advanced Code Signing Class2 e-Szigno CA 2016 | Microsec Ltd. | 2029-12-29 | Valid | A98C8CED93F9A43631ABE4573864E06C5192900723E97D1EED2C0D7C68B2D079 |
| Qualified e-Szigno Organization CA 2016 | Microsec Ltd. | 2029-12-29 | Valid | 60AF9E5F39D873B236BE142BC706DA571849AED7FAE635FC5A1461A0CF7459C5 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as Microsec e-Szigno Root CA 2009 with a different issuer, so a client has to carry Microsec e-Szigno Root CA 2009 itself in its root store to trust it.


## What happens when it expires

Microsec e-Szigno Root CA 2009 is valid until 2029-12-30, about 3.1 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors. 1 of its valid intermediates expire later than the root, so their operators need another path, such as a cross-sign from a newer root, before 2029-12-30. Root programs can stop trusting it before it expires: Chrome 2026-09-30.

## FAQ

**Is Microsec e-Szigno Root CA 2009 trusted by Chrome, Firefox, Safari and Windows?**

Yes. As of 2026-11-10, Chrome, Mozilla (Firefox), Apple (Safari) and Microsoft (Windows) all trust it for TLS server authentication. Distrust-after dates already set: Chrome 2026-09-30.

**When does Microsec e-Szigno Root CA 2009 expire?**

On 2029-12-30, about 3.1 years after the 2026-11-10 data snapshot. 1 of the valid ones run past the expiry date of the root itself (2029-12-30).

**How many intermediate certificates has Microsec e-Szigno Root CA 2009 issued?**

The CCADB lists 54: 33 valid, 9 expired and 12 revoked. The newest valid one is e-Szigno TLS Root CA 2023, valid until 2029-12-30.

**Is Microsec e-Szigno Root CA 2009 cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).