# Secure Global CA root certificate (SSL.com)

> Secure Global CA is a root CA certificate operated by SSL.com (RSA 2048, valid until 2029-12-31, SHA-256 4200F504). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

Source: https://ssl.sh/roots/ssl-com-secure-global-ca/
Last updated: 2026-11-10

Secure Global CA is a root CA certificate operated by SSL.com (RSA 2048, valid until 2029-12-31, SHA-256 4200F504). As of the latest CCADB data it is trusted for TLS server authentication by 1 of 4 major root stores: Microsoft.

| Field | Value |
|---|---|
| CA owner | SSL.com |
| Subject | CN=Secure Global CA,O=SecureTrust Corporation,C=US |
| SHA-256 | 4200F5043AC8590EBB527D209ED1503029FBCBD41CA1B506EC27F15ADE7DAC69 |
| SPKI SHA-256 | 2596904DC4D699AE20C2CEF4DCE47F285937D77464AC370746F52DEA76BA0C28 |
| Valid from | 2006-11-07 |
| Expires | 2029-12-31 |
| Key | RSA 2048 |
| Signature algorithm | sha1WithRSAEncryption |
| Serial number | 75622A4E8D48A894DF413C8F0F8EAA5 |
| SHA-1 (Windows thumbprint) | 3A44735AE581901F248661461E3B9CC45FF53A1B |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Removed | No | - | - |
| Apple | Blocked | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Secure Email, Time Stamping; Not-before cutoff: 2021-08-01 (Code Signing) |

The CCADB lists EV policy OID 2.16.840.1.114404.1.1.2.4.1 for this root, but Mozilla does not mark it as EV-enabled.

## Intermediate CAs issued by this root

The CCADB lists 5 intermediate CA certificates signed directly by Secure Global CA: 1 currently valid, 1 expired and 3 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| SSL.com TLS RSA Root CA 2022 | SSL.com | 2029-12-28 | Valid | 2A2ABB81B6A23186F92D5B7E21FB5931467ACE1F7BD4AE4395BF4C4B8C026468 |
| Trustwave Secure Global Extended Validation CA, Level 1 | SSL.com | 2025-08-09 | Expired | 45B2B08E1B58948A028BE13A67C0E20D4B2466AE2B6EC6250EBB10FD6B7F8239 |
| VikingCloud SG TLS EV CA, Level 1 | SSL.com | 2029-12-22 | Revoked | 93BFF79125F03F32BA57A6F1E5EFAF5705D278A72C057B2A6C66E1F103ABA517 |
| Trustwave S/MIME CA, Level 2 | SSL.com | 2028-12-22 | Revoked | 0A2A1C448F468DD197E9E8CC70C72AB0BDCA976CE56F6B3221F366250A3FB150 |
| Trustwave Secure E-mail CA, Level 1 | SSL.com | 2028-05-07 | Revoked | FF9EBCE9694BAF4F2F53239AB13ACC3C63C004C2B4CAFD3D752492D3A429BA12 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as Secure Global CA with a different issuer, so a client has to carry Secure Global CA itself in its root store to trust it.


## What happens when it expires

Secure Global CA is valid until 2029-12-31, about 3.1 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is Secure Global CA trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Microsoft trust it for TLS server authentication; Chrome, Mozilla, Apple do not.

**When does Secure Global CA expire?**

On 2029-12-31, about 3.1 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has Secure Global CA issued?**

The CCADB lists 5: 1 valid, 1 expired and 3 revoked. The newest valid one is SSL.com TLS RSA Root CA 2022, valid until 2029-12-28.

**Is Secure Global CA cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).