# SECOM TLS ECC Root CA 2024 root certificate (SECOM Trust Systems)

> SECOM TLS ECC Root CA 2024 is a root CA certificate operated by SECOM Trust Systems (ECDSA P-384, valid until 2049-01-14, SHA-256 6AB2AB75). As of the latest CCADB data it is trusted for TLS server authentication by 3 of 4 major root stores: Mozilla, Apple, Microsoft.

Source: https://ssl.sh/roots/secom-tls-ecc-root-ca-2024/
Last updated: 2026-11-10

SECOM TLS ECC Root CA 2024 is a root CA certificate operated by SECOM Trust Systems (ECDSA P-384, valid until 2049-01-14, SHA-256 6AB2AB75). As of the latest CCADB data it is trusted for TLS server authentication by 3 of 4 major root stores: Mozilla, Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | SECOM Trust Systems |
| Subject | CN=SECOM TLS ECC Root CA 2024,O=SECOM Trust Systems Co.\, Ltd.,C=JP |
| SHA-256 | 6AB2AB75F51CB4F4F0156203FBF6F646232F514BE059F62833308B82B4D72DB1 |
| SPKI SHA-256 | 294679E0F97FFD474F19567B36382394E1B4960E030975E66353452034A3C5EA |
| Valid from | 2024-01-31 |
| Expires | 2049-01-14 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA384 |
| Serial number | 817A2CEF8F237A44 |
| SHA-1 (Windows thumbprint) | 7A1F222D72B2C3198744DB6169E8A64BD70D440E |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Not included | No | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites; EV policy OIDs: 2.23.140.1.1; First included in: 3.126 / 154; Inclusion bug: #1943001 |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication |

Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 5 intermediate CA certificates signed directly by SECOM TLS ECC Root CA 2024: 3 currently valid, 0 expired and 2 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| NII Open Domain CA - G8 ECC | SECOM Trust Systems Co., Ltd. | 2029-06-05 | Valid | 287BA7D22607D566B8372EB18D3115AEF037A84FFC1932BFB4B5200DFA60064B |
| SECOM Passport for Web OV ECC CA 2024 | SECOM Trust Systems Co., Ltd. | 2039-01-12 | Valid | 42F56E96CD88B13C29258FCDC1213040ABF0C42EA29672991AEC3F3734CED056 |
| SECOM Passport for Web EV ECC CA 2024 | SECOM Trust Systems Co., Ltd. | 2039-01-12 | Valid | 0930324B3D817D306B6E01C6205B56A3AC856142FD5AAE166EF65160660DEE5C |
| Cybertrust iTrust EV TLS ECCP384 CA 2025 E1 | Cybertrust Japan Co., Ltd. | 2029-07-31 | Revoked | 39BEB75E89C32B19D7E89D2C23CF3880BC59B26B0459B19BC17D489495F8BBB5 |
| Cybertrust iTrust OV TLS ECCP384 CA 2025 E1 | Cybertrust Japan Co., Ltd. | 2029-07-31 | Revoked | 08A79CAC87F2492F9CFDC133B94C43FBE396FCF9E240E68C67F9A09CC061D51A |

## Cross-signed versions

1 certificate(s) in the CCADB have the same subject and public key as SECOM TLS ECC Root CA 2024 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not SECOM TLS ECC Root CA 2024, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| Security Communication ECC RootCA1 | SECOM Trust Systems Co., Ltd. | 2038-01-18 | Valid | 22DA96F19EFC0429034A22755E9D7FE4746B3CAD56A013ED1C02F142A722B9A7 |

## What happens when it expires

SECOM TLS ECC Root CA 2024 is valid until 2049-01-14, about 22.2 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is SECOM TLS ECC Root CA 2024 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Mozilla, Apple, Microsoft trust it for TLS server authentication; Chrome do not.

**When does SECOM TLS ECC Root CA 2024 expire?**

On 2049-01-14, about 22.2 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has SECOM TLS ECC Root CA 2024 issued?**

The CCADB lists 5: 3 valid, 0 expired and 2 revoked. The newest valid one is NII Open Domain CA - G8 ECC, valid until 2029-06-05.

**Is SECOM TLS ECC Root CA 2024 cross-signed?**

Yes. The CCADB has 1 cross-certificate(s) with its subject and key, signed by Security Communication ECC RootCA1; 1 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).