# SSL.com EV Root Certification Authority ECC root certificate (SSL.com)

> SSL.com EV Root Certification Authority ECC is a root CA certificate operated by SSL.com (ECDSA P-384, valid until 2041-02-12, SHA-256 22A2C1F7). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

Source: https://ssl.sh/roots/ssl-com-ev-root-ca-ecc/
Last updated: 2026-11-10

SSL.com EV Root Certification Authority ECC is a root CA certificate operated by SSL.com (ECDSA P-384, valid until 2041-02-12, SHA-256 22A2C1F7). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | SSL.com |
| Subject | CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US |
| SHA-256 | 22A2C1F7BDED704CC1E701B5F408C310880FE956B5DE2A4A44F99C873A25A7C8 |
| SPKI SHA-256 | 348767CDAD3BDD28B2B8DD5351AEC30C68CEC5CD69D276DF3827DBC4F5806464 |
| Valid from | 2016-02-12 |
| Expires | 2041-02-12 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA256 |
| Serial number | 2C299C5B16ED0595 |
| SHA-1 (Windows thumbprint) | 4CDD51A3D1F5203214B0C6C532230391C746426D |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Included | Yes | 2026-06-14 | - |
| Mozilla | Included | Yes | - | Trust bits: Websites; EV policy OIDs: 2.23.140.1.1; First included in: NSS 3.34 / Firefox 58; Inclusion bug: #1277336 |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth; Allowed policies: Server Authentication, Client Authentication |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Document Signing, Encrypting File System, Secure Email, Time Stamping; Not-before cutoff: 2025-09-15 (Secure Email) |

Chrome stops trusting TLS certificates under this root whose SCTs are dated after 2026-06-14 (sct_not_after). Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 11 intermediate CA certificates signed directly by SSL.com EV Root Certification Authority ECC: 6 currently valid, 0 expired and 5 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| SSL.com TLS ECC Root CA 2022 | SSL.com | 2038-11-03 | Valid | AC25863BA43B96AEA864BA2AA256022AF9D38DC93E97437F3DE603CC487306CB |
| E-Tugra EV TLS ECC CA R1 | SSL.com | 2032-02-26 | Valid | 7BA8F0BB49F501E9BB72E3A13708C6A933140FDC65592A37ACDE66AD07DE607E |
| SSL.com EV Code Signing Transit ECC CA R1 | SSL.com | 2037-02-24 | Valid | 7451863C68B08CDA11BEF0AD6D8F5B796D654E2018C1364D7360F1BB42B8A91A |
| SSL.com EV TLS Transit ECC CA R1 | SSL.com | 2037-02-24 | Valid | 619079F100A6BFB65CB2E98890DD0AC492B64665E254A66A529D8F5917D82AB1 |
| SSL.com EV Code Signing Intermediate CA ECC R2 | SSL.com | 2034-03-03 | Valid | 8CB32482CDAF38DD68E322AB9B4434E773910F33B2F56F8022D5156208465417 |
| SSL.com EV SSL Intermediate CA ECC R2 | SSL.com | 2034-03-03 | Valid | 8394E3D07EFCD1E97EA6CBA214C3A055C17DD9A7EBF8DDE0020FCDDB76F28653 |
| EV TLS ECC ICA R1 | SSL.com | 2029-12-02 | Revoked | A5F4B826A58637F912B69FE859907243BDFEAA71A02DC4429D0664E214A0A9DB |
| SSL X Y & Z EV TLS CA ECC R1 | SSL.com | 2029-08-19 | Revoked | 9037D9090A63664CEE444BE8633109765C90A9E0E0032A36C437E3BABBB94EDE |
| SSL.com EV Enterprise Intermediate CA ECC R1 | SSL.com | 2034-01-12 | Revoked | C65CC16BC32727388D7B190A04C7E5269D575F4CDCCB4E724A863690F6F834C9 |
| SSL.com EV Code Signing Intermediate CA ECC R1 | SSL.com | 2033-12-13 | Revoked | D013A18CC990ED392783A24C581F6628848936B6F5019BEE8C6207CEF191A0A1 |
| SSL.com EV ECC SSL subCA | SSL.com | 2031-02-12 | Revoked | 31BB2C2E5BAD9F1E21AAAFE04F0E6D97DB67A231975F3AA7D83568E26D7B326D |

## Cross-signed versions

3 certificate(s) in the CCADB have the same subject and public key as SSL.com EV Root Certification Authority ECC but a different issuer. A server can send one of them so that clients which trust the issuing root, but not SSL.com EV Root Certification Authority ECC, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| SSL.com EV Root Certification Authority RSA R2 | SSL.com | 2027-02-12 | Valid | 60EF412EABE7C3FC6399EED1B633B777747515B29D721B963DD258BC498AB292 |
| SecureTrust CA | SSL.com | 2029-12-30 | Valid | 64BEB202D4BFBDDC7D0D8E7AB1CD3C25FB17F4AC031B83B75EE1BF53DB7D4341 |
| XRamp Global Certification Authority | SSL.com | 2034-12-30 | Valid | 10B5AAE6A5E9B787D6E0CDAF39A296B64084ABBCFD4A497357BA37EACC1751B5 |

## What happens when it expires

SSL.com EV Root Certification Authority ECC is valid until 2041-02-12, about 14.3 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors. Root programs can stop trusting it before it expires: Chrome 2026-06-14.

## FAQ

**Is SSL.com EV Root Certification Authority ECC trusted by Chrome, Firefox, Safari and Windows?**

Yes. As of 2026-11-10, Chrome, Mozilla (Firefox), Apple (Safari) and Microsoft (Windows) all trust it for TLS server authentication. Distrust-after dates already set: Chrome 2026-06-14.

**When does SSL.com EV Root Certification Authority ECC expire?**

On 2041-02-12, about 14.3 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has SSL.com EV Root Certification Authority ECC issued?**

The CCADB lists 11: 6 valid, 0 expired and 5 revoked. The newest valid one is SSL.com TLS ECC Root CA 2022, valid until 2038-11-03.

**Is SSL.com EV Root Certification Authority ECC cross-signed?**

Yes. The CCADB has 3 cross-certificate(s) with its subject and key, signed by SSL.com EV Root Certification Authority RSA R2, SecureTrust CA, XRamp Global Certification Authority; 3 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).