# NAVER Cloud Trust Services ECC Root G1 root certificate (NAVER Cloud Trust Services) > NAVER Cloud Trust Services ECC Root G1 is a root CA certificate operated by NAVER Cloud Trust Services (ECDSA P-384, valid until 2043-06-06, SHA-256 A7C86810). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft. Source: https://ssl.sh/roots/naver-cloud-trust-services-ecc-root-g1/ Last updated: 2026-11-10 NAVER Cloud Trust Services ECC Root G1 is a root CA certificate operated by NAVER Cloud Trust Services (ECDSA P-384, valid until 2043-06-06, SHA-256 A7C86810). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft. | Field | Value | |---|---| | CA owner | NAVER Cloud Trust Services | | Subject | CN=NAVER Cloud Trust Services ECC Root G1,O=NAVER Cloud Trust Services Corp.,C=KR | | SHA-256 | A7C8681042F3675AA8505D3BA313D80F8AC3250FDF874AD29B834689C087FB11 | | SPKI SHA-256 | D9FD822613737D118EB94FF75F4F28EF11EE97D26F4584126B3579F722CFD540 | | Valid from | 2023-06-07 | | Expires | 2043-06-06 | | Key | ECDSA P-384 | | Signature algorithm | ecdsa-with-SHA384 | | Serial number | 17F20237EE582113466C837E47815E5BE12BA15 | | SHA-1 (Windows thumbprint) | 87E73E149246AA634308E3A3142B1417F00FE25D | ## Root store status | Root store | Status | Trusted for TLS | Distrust for TLS after | Details | |---|---|---|---|---| | Chrome | Not included | No | - | - | | Mozilla | Not included | No | - | - | | Apple | Not included | No | - | - | | Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication | The CCADB lists no EV policy OID for NAVER Cloud Trust Services ECC Root G1. ## Intermediate CAs issued by this root The CCADB lists 6 intermediate CA certificates signed directly by NAVER Cloud Trust Services ECC Root G1: 2 currently valid, 0 expired and 4 revoked (revoked includes those whose parent was revoked). | Intermediate | Operated by | Expires | Status | SHA-256 | |---|---|---|---|---| | NAVER Cloud Trust Services G1 ECC CA5 | NAVER Cloud Trust Services | 2029-09-15 | Valid | 8DCEB7509571B231CEFD76C54BD3353F153BB98DB660A68BB9022FEFB5C27860 | | NAVER Cloud Trust Services G1 ECC CA6 | NAVER Cloud Trust Services | 2029-09-15 | Valid | 59DC3E4F0820C0EFE515FBCB6451632EFB02FFB94362560CD464D2A29770FF9B | | NAVER Cloud Trust Services G1 ECC CA4 | NAVER Cloud Trust Services | 2029-05-03 | Revoked | 1D795B49C4C1AE2EB90393A07D9758207780FE8A838E802919EABC9B32E54AEA | | NAVER Cloud Trust Services G1 ECC CA2 | NAVER Cloud Trust Services | 2035-11-18 | Revoked | BBA98FFC6A2D5AD251B34BC6632D3DA88955CB46F4A1F4DF443980A4BF92845F | | NAVER Cloud Trust Services G1 ECC CA3 | NAVER Cloud Trust Services | 2028-10-18 | Revoked | 41C587A6BAC0143297D0EDC5D522B57CD8B2D1A0D4913A1B534A9F9A86668536 | | NAVER Cloud Trust Services G1 ECC CA1 | NAVER Cloud Trust Services | 2033-06-06 | Revoked | 882D9924FC69A00574D54C2BB4014825A1C1C71FA1D0238CAC865FE0AA4AD60B | ## Cross-signed versions 2 certificate(s) in the CCADB have the same subject and public key as NAVER Cloud Trust Services ECC Root G1 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not NAVER Cloud Trust Services ECC Root G1, can still build a chain. | Signed by | CA owner | Expires | Status | SHA-256 | |---|---|---|---|---| | NAVER Global Root Certification Authority | NAVER Cloud Trust Services | 2036-06-04 | Valid | 9C6D1D29072CEB7E12F436D6EC27EFE9F9D7A132968A4B2AAB955654CE8D2004 | | NAVER Global Root Certification Authority | NAVER Cloud Trust Services | 2038-12-09 | Revoked | 355CD125F93CE5BF268F958C1D1F8AAD289FDBD41BAFAA856691DB7260F2ACAB | ## What happens when it expires NAVER Cloud Trust Services ECC Root G1 is valid until 2043-06-06, about 16.6 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors. ## FAQ **Is NAVER Cloud Trust Services ECC Root G1 trusted by Chrome, Firefox, Safari and Windows?** As of 2026-11-10, Microsoft trust it for TLS server authentication; Chrome, Mozilla, Apple do not. **When does NAVER Cloud Trust Services ECC Root G1 expire?** On 2043-06-06, about 16.6 years after the 2026-11-10 data snapshot. **How many intermediate certificates has NAVER Cloud Trust Services ECC Root G1 issued?** The CCADB lists 6: 2 valid, 0 expired and 4 revoked. The newest valid one is NAVER Cloud Trust Services G1 ECC CA5, valid until 2029-09-15. **Is NAVER Cloud Trust Services ECC Root G1 cross-signed?** Yes. The CCADB has 2 cross-certificate(s) with its subject and key, signed by NAVER Global Root Certification Authority; 1 of them are still valid. Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).