# NAVER Cloud Trust Services RSA Root G1 root certificate (NAVER Cloud Trust Services) > NAVER Cloud Trust Services RSA Root G1 is a root CA certificate operated by NAVER Cloud Trust Services (RSA 4096, valid until 2043-06-06, SHA-256 49A27629). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft. Source: https://ssl.sh/roots/naver-cloud-trust-services-rsa-root-g1/ Last updated: 2026-11-10 NAVER Cloud Trust Services RSA Root G1 is a root CA certificate operated by NAVER Cloud Trust Services (RSA 4096, valid until 2043-06-06, SHA-256 49A27629). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft. | Field | Value | |---|---| | CA owner | NAVER Cloud Trust Services | | Subject | CN=NAVER Cloud Trust Services RSA Root G1,O=NAVER Cloud Trust Services Corp.,C=KR | | SHA-256 | 49A2762987788D4834B32305D767760F244D507742E8C2539FD4CA3AD52C16EE | | SPKI SHA-256 | F7E8F0C546B48431D656A8042A9466EAC807DA2A34441D671C36186541413C86 | | Valid from | 2023-06-07 | | Expires | 2043-06-06 | | Key | RSA 4096 | | Signature algorithm | sha384WithRSAEncryption | | Serial number | 193205EA337C2A7BB2756B16E35C27119203EF1 | | SHA-1 (Windows thumbprint) | C4DA90EE324D7E4D041CB1F286FBB45388207CA1 | ## Root store status | Root store | Status | Trusted for TLS | Distrust for TLS after | Details | |---|---|---|---|---| | Chrome | Not included | No | - | - | | Mozilla | Not included | No | - | - | | Apple | Not included | No | - | - | | Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication | The CCADB lists no EV policy OID for NAVER Cloud Trust Services RSA Root G1. ## Intermediate CAs issued by this root The CCADB lists 6 intermediate CA certificates signed directly by NAVER Cloud Trust Services RSA Root G1: 2 currently valid, 0 expired and 4 revoked (revoked includes those whose parent was revoked). | Intermediate | Operated by | Expires | Status | SHA-256 | |---|---|---|---|---| | NAVER Cloud Trust Services G1 RSA CA6 | NAVER Cloud Trust Services | 2029-09-15 | Valid | 7AADCACA1A5B38BCF206B515E41440744DC2F4243AEBB786A4B585C5A0843012 | | NAVER Cloud Trust Services G1 RSA CA5 | NAVER Cloud Trust Services | 2029-09-15 | Valid | 0E56381C829694BB526D6F51069B22E66A58CA983D77400B5BE17C200BD4E907 | | NAVER Cloud Trust Services G1 RSA CA4 | NAVER Cloud Trust Services | 2029-05-03 | Revoked | 8BC478A581DE657A86C2E8A4CE0A30CA9D7ABDAEF931E590D84DB235B2A5291C | | NAVER Cloud Trust Services G1 RSA CA2 | NAVER Cloud Trust Services | 2035-11-18 | Revoked | 45B3942959D74F8B546A6AB47404AFC4A583AD5FA6FFD89A827A2A78522F66FD | | NAVER Cloud Trust Services G1 RSA CA3 | NAVER Cloud Trust Services | 2028-10-18 | Revoked | 027B4EEC38B46BFD6B5C3E028F0922D268D367698BD15E01F7BD081EC36C8369 | | NAVER Cloud Trust Services G1 RSA CA1 | NAVER Cloud Trust Services | 2033-06-06 | Revoked | 17832DBB48F609B722A27507F1D327DE062D7F7B85B71325D8DD99B19FB5BAD4 | ## Cross-signed versions 3 certificate(s) in the CCADB have the same subject and public key as NAVER Cloud Trust Services RSA Root G1 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not NAVER Cloud Trust Services RSA Root G1, can still build a chain. | Signed by | CA owner | Expires | Status | SHA-256 | |---|---|---|---|---| | NAVER Global Root Certification Authority | NAVER Cloud Trust Services | 2036-05-13 | Valid | 6450194DDCAECF1585DC305420CBB335BD32396F798AD8DB3B79B53324DAD28A | | NAVER Global Root Certification Authority | NAVER Cloud Trust Services | 2036-06-04 | Revoked | 5BC2A8B50804AE2B2EC487B58902CC05ACA1C2F56E98C5B97113FF958016694A | | NAVER Global Root Certification Authority | NAVER Cloud Trust Services | 2038-12-09 | Revoked | 67F9DA159B4AEB3B55E2C37C402E91CEFE87D784D81CE949FA532184620C3CFD | ## What happens when it expires NAVER Cloud Trust Services RSA Root G1 is valid until 2043-06-06, about 16.6 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors. ## FAQ **Is NAVER Cloud Trust Services RSA Root G1 trusted by Chrome, Firefox, Safari and Windows?** As of 2026-11-10, Microsoft trust it for TLS server authentication; Chrome, Mozilla, Apple do not. **When does NAVER Cloud Trust Services RSA Root G1 expire?** On 2043-06-06, about 16.6 years after the 2026-11-10 data snapshot. **How many intermediate certificates has NAVER Cloud Trust Services RSA Root G1 issued?** The CCADB lists 6: 2 valid, 0 expired and 4 revoked. The newest valid one is NAVER Cloud Trust Services G1 RSA CA6, valid until 2029-09-15. **Is NAVER Cloud Trust Services RSA Root G1 cross-signed?** Yes. The CCADB has 3 cross-certificate(s) with its subject and key, signed by NAVER Global Root Certification Authority; 1 of them are still valid. Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).