# NetLock Arany (Class Gold) Főtanúsítvány root certificate (NETLOCK)

> NetLock Arany (Class Gold) Főtanúsítvány is a root CA certificate operated by NETLOCK (RSA 2048, valid until 2028-12-06, SHA-256 6C61DAC3). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Mozilla, Microsoft.

Source: https://ssl.sh/roots/netlock-arany-class-gold-fotanusitvany/
Last updated: 2026-11-10

NetLock Arany (Class Gold) Főtanúsítvány is a root CA certificate operated by NETLOCK (RSA 2048, valid until 2028-12-06, SHA-256 6C61DAC3). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Mozilla, Microsoft.

| Field | Value |
|---|---|
| CA owner | NETLOCK |
| Subject | CN=NetLock Arany (Class Gold) Főtanúsítvány,OU=Tanúsítványkiadók (Certification Services),O=NetLock Kft.,L=Budapest,C=HU |
| SHA-256 | 6C61DAC3A2DEF031506BE036D2A6FE401994FBD13DF9C8D466599274C446EC98 |
| SPKI SHA-256 | F48BADD7DF6A06690D0AE31373B12855F8DEDB14517F362A313101CC98CC6B35 |
| Valid from | 2008-12-11 |
| Expires | 2028-12-06 |
| Key | RSA 2048 |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 49412CE40010 |
| SHA-1 (Windows thumbprint) | 06083F593F15A104A069A46BA903D006B7970991 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites, Email; EV policy OIDs: 2.23.140.1.1; First included in: NSS 3.12.6 / Firefox 3.6.2; Inclusion bug: #1579454 |
| Apple | Blocked | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Encrypting File System, IP Security Tunnel Termination, IP Security User, Secure Email, Time Stamping; Not-before cutoff: 2022-02-01 (Code Signing) |

Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 36 intermediate CA certificates signed directly by NetLock Arany (Class Gold) Főtanúsítvány: 14 currently valid, 8 expired and 14 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| NETLOCK DVSSL CA | Netlock | 2028-10-07 | Valid | F91606D1BC52C610136CAA856AB500C48C3B993BAC4808CD82BC4B78ABF24156 |
| NETLOCK Trust Qualified RQSCD CA | Netlock | 2028-07-24 | Valid | A59F880816A50886D4D5996E64918DD9D401472AA685D28E7DECA5299F05FCE0 |
| NETLOCK Trust Qualified EV CA 3 | Netlock | 2028-11-14 | Valid | 7ECACA4A3585A3B40E25574415512D56B57999B753017856F2AB15FA1F21F6D0 |
| NETLOCK Trust EV CA 3 | Netlock | 2028-11-14 | Valid | 047795785CDCFF9E6E0AE122492E5B7BF08A9E5C49762E2BCB52747C69031561 |
| NETLOCK Trust Qualified QSCD CA | Netlock | 2028-07-07 | Valid | 9E4362A918A89009877C7B8B190E763AE012AD47C1CCA5FCCF166FC092BC2ADE |
| NETLOCK Trust Qualified SCD CA | Netlock | 2028-07-07 | Valid | 7CE1DB7D16E9BFE80693214A3D7C6263AA24789E399017E69EDE4802ECF6F711 |
| NETLOCK Trust Qualified CA | Netlock | 2028-07-07 | Valid | 5498963DFFA651604F467E108E65A183470FA9B557C129DDF8C9D812B4F0BF96 |
| NETLOCK Trust Advanced Plus CA | Netlock | 2028-11-17 | Valid | F2603670BEDEAD1D977D6992FA6554E6CA595BC50F3B03F416DCF0F20DAC36C2 |
| NETLOCK Trust Advanced CA | Netlock | 2028-11-17 | Valid | D82F87F93D31D5FC818DD66BD50E7F319AE179FC1C5D00547B658E8EB3F4CE56 |
| NETLOCK Trust CA | Netlock | 2028-11-17 | Valid | 58D7A197F09A6EA552B8EA6B1A53185A030A3AD8D52220C00C44E3F450E4FB90 |
| NetLock CodeSign CA | Netlock | 2028-10-08 | Valid | C56F0F286618C1E7B0E112C97B9EE96FEB4D71E79496C151FA1FE8A8CEBD06CD |
| NetLock Közjegyzői Eat. (Class A Legal) Tanúsítványkiadó | Netlock | 2027-10-23 | Valid | AD47883A48C86A3469E32C972B39A3EE155804D32BF53FF002000BCA11D295D9 |
| NetLock Minősített Eat. Spec. (Class Q Legal Spec.) Kiadó | Netlock | 2027-10-23 | Valid | A5F2FD0D66DB4DD77A2914ED3C747CBD97E734CF4E2B6F217FB41AA4EAFDEAD2 |
| NetLock Közjegyzői (Class A) Tanúsítványkiadó | Netlock | 2027-10-23 | Valid | 75894D4C94C22D7296EE19FB447623258C2591B17031288BB386A20AA1F0E0A6 |
| MNB Hitelesítő Alegység 2. (Eat.) | Netlock | 2019-07-09 | Expired | 878EF628267A15493D2BD9B1BA12311874680BD8E1C4F04A8B369241DB034DFA |
| MNB Hitelesítő Alegység 2. | Netlock | 2019-07-09 | Expired | 4A3BB05DB15EE3BE9774206B8B6AFE229C6F7C87C3A5CFA08861568EBDCE7DB3 |
| MKB Hitelesítő Alegység 2 | Netlock | 2019-06-06 | Expired | E53A9D8C0046C6366D3C6A18E23B4F4CBAAADB7D79B8C2F18786821DEE046AF3 |
| NetLock Expressz Eat. (Class C Legal) Tanúsítványkiadó | Netlock | 2026-03-13 | Expired | BB661D750C53166181807A6898FD464065CE59298986AD66D9D6FFFCBBD4738A |
| NetLock Expressz (Class C) Tanúsítványkiadó | Netlock | 2026-03-13 | Expired | 372B8F4CE73BEDFC88718C407BB6B3E6D8F9A79BE957190D0E7101C7B0EF9A32 |
| NetLock Minősített Eat. (Class Q Legal) Tanúsítványkiadó | Netlock | 2024-10-15 | Expired | 6284A03BAFAE861A30E3A25A030428306F7EB52BD0BA577A1D962A809A830C9E |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as NetLock Arany (Class Gold) Főtanúsítvány with a different issuer, so a client has to carry NetLock Arany (Class Gold) Főtanúsítvány itself in its root store to trust it.


## What happens when it expires

NetLock Arany (Class Gold) Főtanúsítvány is valid until 2028-12-06, about 2.1 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is NetLock Arany (Class Gold) Főtanúsítvány trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Mozilla, Microsoft trust it for TLS server authentication; Chrome, Apple do not.

**When does NetLock Arany (Class Gold) Főtanúsítvány expire?**

On 2028-12-06, about 2.1 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has NetLock Arany (Class Gold) Főtanúsítvány issued?**

The CCADB lists 36: 14 valid, 8 expired and 14 revoked. The newest valid one is NETLOCK DVSSL CA, valid until 2028-10-07.

**Is NetLock Arany (Class Gold) Főtanúsítvány cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).