# SSL.com TLS ECC Root CA 2022 root certificate (SSL.com)

> SSL.com TLS ECC Root CA 2022 is a root CA certificate operated by SSL.com (ECDSA P-384, valid until 2046-08-19, SHA-256 C32FFD9F). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

Source: https://ssl.sh/roots/ssl-com-tls-ecc-root-ca-2022/
Last updated: 2026-11-10

SSL.com TLS ECC Root CA 2022 is a root CA certificate operated by SSL.com (ECDSA P-384, valid until 2046-08-19, SHA-256 C32FFD9F). As of the latest CCADB data it is trusted for TLS server authentication by 4 of 4 major root stores: Chrome, Mozilla, Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | SSL.com |
| Subject | CN=SSL.com TLS ECC Root CA 2022,O=SSL Corporation,C=US |
| SHA-256 | C32FFD9F46F936D16C3673990959434B9AD60AAFBB9E7CF33654F144CC1BA143 |
| SPKI SHA-256 | 1BF00D5C8F13C094DD17E00504CF0888850F12FD067FA1F92C0FDBF60B86E321 |
| Valid from | 2022-08-25 |
| Expires | 2046-08-19 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA384 |
| Serial number | 1403F5ABFB378B17405BE243B2A5D1C4 |
| SHA-1 (Windows thumbprint) | 9F5FD91A546DF50C71F0EE7ABD1749988473E239 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Included | Yes | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites; EV policy OIDs: 2.23.140.1.1; First included in: NSS 3.92 / Firefox 117; Inclusion bug: #1799533 |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication |

Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 13 intermediate CA certificates signed directly by SSL.com TLS ECC Root CA 2022: 13 currently valid, 0 expired and 0 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| E-Tugra TLS ECC CA 2 | SSL.com | 2036-06-09 | Valid | 369EC927C0A23C8928841D993E1C25851F7FFFE251D8F7CFEDC58095228BDE7D |
| Crowdstrike, Inc. OV TLS Issuing ECC CA 1 | SSL.com | 2027-09-26 | Valid | 8D2AB0655145C4A7805CC3080D7C23451848C6864DA0BEA9FFCC87ADAB552C61 |
| Entrust EV TLS Issuing ECC CA 1 | SSL.com | 2027-08-22 | Valid | 90487DF9DA11848B04C9993B92EA7BEFD2EB73C5765A3C9BBAEEC3AB2E0D1440 |
| Entrust OV TLS Issuing ECC CA 1 | SSL.com | 2027-08-22 | Valid | 87026A05BC3AD085A8E447C2D2864E2EBEC7D017DC488DE255CF4E5EB0576271 |
| Entrust DV TLS Issuing ECC CA 1 | SSL.com | 2027-08-22 | Valid | 1A7BD13C77A02501E19B12D6E3CA17BE0B09B5D1AF7711C331A8C096D354D705 |
| SSL.com OV TLS Issuing ECC CA 1 | SSL.com | 2032-12-06 | Valid | F1728DCAF61A28069EEA0FA1B482DD61A463F75255DD700CF60607E75E93C9A9 |
| SSL.com IV TLS Transit ECC CA 1 | SSL.com | 2037-12-05 | Valid | 57D61F0944948124E9B7685C7E2C9B4344E75DA9588328ECDF936AC8E80B438E |
| SSL.com IV TLS Issuing ECC CA 1 | SSL.com | 2032-12-06 | Valid | 41EFEF46FD0E434B644BB47E6E21182A8DEF59B1E6E1F2952587FA28BF10A4A2 |
| SSL.com OV TLS Transit ECC CA 1 | SSL.com | 2037-12-05 | Valid | 0DA999DF66FD21CAFF5E1376ABAD37B4FD2C8AA69B25A3F60794E6F3AA47D98B |
| SSL.com TLS Issuing ECC CA R2 | SSL.com | 2032-10-18 | Valid | 7F3EE6366236EDE6C1F7C21C443C644D32153EDAA9357C3A6DA879CDF2A6B0B6 |
| SSL.com EV TLS Issuing ECC CA R1 | SSL.com | 2032-10-18 | Valid | 68255D5EA52D2CA9A0B1F8EFF8F446CECC95A80A5D880DB681F1630C0B4B214D |
| SSL.com TLS Transit ECC CA R2 | SSL.com | 2037-10-17 | Valid | 5D1BC399274E649E1C72697DE91A54AD725088C5221CB61E17EE9C290BC42A92 |
| SSL.com EV TLS Transit ECC CA R2 | SSL.com | 2037-10-17 | Valid | 4CF773F955FDB7A97DB1250F2FD7BA36075A96166BB5CC417B5C021D0F70ADF2 |

## Cross-signed versions

7 certificate(s) in the CCADB have the same subject and public key as SSL.com TLS ECC Root CA 2022 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not SSL.com TLS ECC Root CA 2022, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| AAA Certificate Services | Sectigo | 2028-12-31 | Valid | BA06D3D3E348FCE7478CC84B422D0E638E9E221EF1A0B53ADC14CC70E04B8AB8 |
| SecureTrust CA | SSL.com | 2029-12-30 | Valid | 469A5624CBF125C29B1C73AA4D05D4B2BF4F8400B5D569E9A4CA554AB4C4FAF5 |
| XRamp Global Certification Authority | SSL.com | 2034-12-30 | Valid | 5DA2AA591B0F1DE7FF0C0D95DF3424A1FC683E3309AD3ACCBFA783CE93CCDF13 |
| SSL.com EV Root Certification Authority ECC | SSL.com | 2038-11-03 | Valid | AC25863BA43B96AEA864BA2AA256022AF9D38DC93E97437F3DE603CC487306CB |
| SSL.com Root Certification Authority ECC | SSL.com | 2040-02-15 | Valid | 1E6EBEF80676FD20D2597C1F45A5E198DD4C4CBF3328E522837196600C319141 |
| Trustwave Global ECC P384 Certification Authority | SSL.com | 2042-08-21 | Valid | A1878AE6E6D02EEAA10199924DEC398AD285CFE2E3904B5F668D925A23A4561C |
| Trustwave Global ECC P256 Certification Authority | SSL.com | 2042-08-21 | Valid | 08D48685EF84C770B441F6365D707B1C7AA293AE2FD7AA159A24451380C60134 |

## What happens when it expires

SSL.com TLS ECC Root CA 2022 is valid until 2046-08-19, about 19.8 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is SSL.com TLS ECC Root CA 2022 trusted by Chrome, Firefox, Safari and Windows?**

Yes. As of 2026-11-10, Chrome, Mozilla (Firefox), Apple (Safari) and Microsoft (Windows) all trust it for TLS server authentication.

**When does SSL.com TLS ECC Root CA 2022 expire?**

On 2046-08-19, about 19.8 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has SSL.com TLS ECC Root CA 2022 issued?**

The CCADB lists 13: 13 valid, 0 expired and 0 revoked. The newest valid one is E-Tugra TLS ECC CA 2, valid until 2036-06-09.

**Is SSL.com TLS ECC Root CA 2022 cross-signed?**

Yes. The CCADB has 7 cross-certificate(s) with its subject and key, signed by AAA Certificate Services, SecureTrust CA, XRamp Global Certification Authority, SSL.com EV Root Certification Authority ECC, SSL.com Root Certification Authority ECC, Trustwave Global ECC P384 Certification Authority, Trustwave Global ECC P256 Certification Authority; 7 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).