# Trustwave Global ECC P256 Certification Authority root certificate (SSL.com)

> Trustwave Global ECC P256 Certification Authority is a root CA certificate operated by SSL.com (ECDSA P-256, valid until 2042-08-23, SHA-256 945BBC82). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Apple, Microsoft.

Source: https://ssl.sh/roots/ssl-com-trustwave-global-ecc-p256-ca/
Last updated: 2026-11-10

Trustwave Global ECC P256 Certification Authority is a root CA certificate operated by SSL.com (ECDSA P-256, valid until 2042-08-23, SHA-256 945BBC82). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | SSL.com |
| Subject | CN=Trustwave Global ECC P256 Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US |
| SHA-256 | 945BBC825EA554F489D1FD51A73DDF2EA624AC7019A05205225C22A78CCFA8B4 |
| SPKI SHA-256 | 497128FC90656B87290482B223EFB72240FE9C421E79938DE5F8110CB0BE9056 |
| Valid from | 2017-08-23 |
| Expires | 2042-08-23 |
| Key | ECDSA P-256 |
| Signature algorithm | ecdsa-with-SHA256 |
| Serial number | D6A5F083F285C3E5195DF5D |
| SHA-1 (Windows thumbprint) | B49082DD450CBE8B5BB166D3E2A40826CDED42CF |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Removed | No | - | - |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth, emailProtection |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Secure Email, Time Stamping; Not-before cutoff: 2025-09-15 (Code Signing) |

The CCADB lists EV policy OID 2.23.140.1.1, 2.16.840.1.114404.1.1.2.4.1 for this root, but Mozilla does not mark it as EV-enabled.

## Intermediate CAs issued by this root

The CCADB lists 15 intermediate CA certificates signed directly by Trustwave Global ECC P256 Certification Authority: 1 currently valid, 0 expired and 14 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| SSL.com TLS ECC Root CA 2022 | SSL.com | 2042-08-21 | Valid | 08D48685EF84C770B441F6365D707B1C7AA293AE2FD7AA159A24451380C60134 |
| VikingCloud TWG TLS P2 OV CA, Level 1 | SSL.com | 2035-02-24 | Revoked | A750D984BCDC86F95137DEC4F3F728C4DE9061574CE7ECD3A549780C3814AE67 |
| VikingCloud TWG TLS P2 EV CA, Level 1 | SSL.com | 2035-02-24 | Revoked | 784BC859AD8D61A50A914C357C14B82814D6F6E3DC713DF8DD18BD9F37DEC408 |
| VikingCloud TWG TLS P2 IV CA, Level 1 | SSL.com | 2035-02-24 | Revoked | 579C53B9062046C3F39A7D60306E3A8E1BA1B6E8E6E8786445A24792FC671BD8 |
| VikingCloud TWG TLS P2 DV CA, Level 1 | SSL.com | 2035-02-24 | Revoked | 53A1808C75A317553A1C3B0F08A186A73844F2E96353D58A666167AA2C614700 |
| SecureTrust TWG ECDSA P-256 Client CA, Level 3 | SSL.com | 2030-10-08 | Revoked | E92BE3F7D2A0FF65927B92EFB65B31BDDADB070999F8D6AA81273D9F90695C7B |
| SecureTrust TWG ECDSA P-256 Secure Email CA, Level 2 | SSL.com | 2030-10-08 | Revoked | B36BE2E3F72EC3FA03B2273EFF994F4F6F4F09B2DD7A28AF951BD38EC103F088 |
| SecureTrust TWG ECDSA P-256 Secure Email CA, Level 1 | SSL.com | 2030-09-21 | Revoked | DB83E0E21E77588E7B532F273CD9501C6F0C3D99F7E3899F9D8F3B0D75D22DBD |
| SecureTrust TWG ECDSA P-256 Client CA, Level 2 | SSL.com | 2030-09-21 | Revoked | 435EEEB914C2B19C8077E064B0902030B69258015C31F9CE493447686640F0A4 |
| Trustwave Global ECDSA P-256 Domain Validation CA, Level 1 | SSL.com | 2028-02-24 | Revoked | F62E35AAD345FB253863CFC0E65823ACD3E7F0846D19B8326D709C7919A22D7E |
| Trustwave Global ECDSA P-256 Client CA, Level 1 | SSL.com | 2028-02-24 | Revoked | D2BB9489EFACF48AD6B342D339C042953058E8F5DA4226ED3E76CA70C172E053 |
| Trustwave Global ECDSA P-256 Timestamping CA, Level 1 | SSL.com | 2042-08-21 | Revoked | 7FC29B856B23EEFC3A5E68775E0B37DC320627FD5C19368BB68397EE219A667A |
| Trustwave Global ECDSA P-256 Code Signing CA, Level 1 | SSL.com | 2042-08-21 | Revoked | 730E02CD3AFD489FDB9D708F674B45FA8CFD73AB926B94855B2C0376F9A528D9 |
| Trustwave Global ECDSA P-256 Extended Validation CA, Level 1 | SSL.com | 2028-02-24 | Revoked | 275BF0046E0270178B13B67E4DB150A10197CB71F9A061FAD36B3D76639FE186 |
| Trustwave Global ECDSA P-256 Organization Validation CA, Level 1 | SSL.com | 2028-02-24 | Revoked | 18ABD6E9CA907BB36754D0C046EBB50DD9B95D527824D9581A31B750FCFDBAEF |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as Trustwave Global ECC P256 Certification Authority with a different issuer, so a client has to carry Trustwave Global ECC P256 Certification Authority itself in its root store to trust it.


## What happens when it expires

Trustwave Global ECC P256 Certification Authority is valid until 2042-08-23, about 15.8 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is Trustwave Global ECC P256 Certification Authority trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Apple, Microsoft trust it for TLS server authentication; Chrome, Mozilla do not.

**When does Trustwave Global ECC P256 Certification Authority expire?**

On 2042-08-23, about 15.8 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has Trustwave Global ECC P256 Certification Authority issued?**

The CCADB lists 15: 1 valid, 0 expired and 14 revoked. The newest valid one is SSL.com TLS ECC Root CA 2022, valid until 2042-08-21.

**Is Trustwave Global ECC P256 Certification Authority cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).