# Trustwave Global ECC P384 Certification Authority root certificate (SSL.com)

> Trustwave Global ECC P384 Certification Authority is a root CA certificate operated by SSL.com (ECDSA P-384, valid until 2042-08-23, SHA-256 55903859). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Apple, Microsoft.

Source: https://ssl.sh/roots/ssl-com-trustwave-global-ecc-p384-ca/
Last updated: 2026-11-10

Trustwave Global ECC P384 Certification Authority is a root CA certificate operated by SSL.com (ECDSA P-384, valid until 2042-08-23, SHA-256 55903859). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | SSL.com |
| Subject | CN=Trustwave Global ECC P384 Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US |
| SHA-256 | 55903859C8C0C3EBB8759ECE4E2557225FF5758BBD38EBD48276601E1BD58097 |
| SPKI SHA-256 | 828B0EEFF24654E8FF5841A29DD5D4E3ED30952CA43425A79283407208D39D16 |
| Valid from | 2017-08-23 |
| Expires | 2042-08-23 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA384 |
| Serial number | 8BD85976C9927A48068473B |
| SHA-1 (Windows thumbprint) | E7F3A3C8CF6FC3042E6D0E6732C59E68950D5ED2 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Removed | No | - | - |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth, emailProtection |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Secure Email, Time Stamping; Not-before cutoff: 2025-09-15 (Code Signing) |

The CCADB lists EV policy OID 2.23.140.1.1, 2.16.840.1.114404.1.1.2.4.1 for this root, but Mozilla does not mark it as EV-enabled.

## Intermediate CAs issued by this root

The CCADB lists 15 intermediate CA certificates signed directly by Trustwave Global ECC P384 Certification Authority: 1 currently valid, 0 expired and 14 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| SSL.com TLS ECC Root CA 2022 | SSL.com | 2042-08-21 | Valid | A1878AE6E6D02EEAA10199924DEC398AD285CFE2E3904B5F668D925A23A4561C |
| VikingCloud TWG TLS P3 DV CA, Level 1 | SSL.com | 2035-02-24 | Revoked | A043E4F739C46F9824E20F04482F2CE42A58169E494CCCD2C15B5F5487315847 |
| VikingCloud TWG TLS P3 OV CA, Level 1 | SSL.com | 2035-02-24 | Revoked | 9773684CDC33F580BA1326A257D725CD47ED84B5829B1C58114F811C33D68F16 |
| VikingCloud TWG TLS P3 EV CA, Level 1 | SSL.com | 2035-02-24 | Revoked | 6A704E7BF3DB67DBD0A74BD810FE922E77A2D459B253D77CF4B6F88EA0F6E4CF |
| VikingCloud TWG TLS P3 IV CA, Level 1 | SSL.com | 2035-02-24 | Revoked | 03FC04C2E2DE35171046AD4F481B2E16AF4F029E6483C6B3845D1F383F2D1BBC |
| SecureTrust TWG ECDSA P-384 Client CA, Level 3 | SSL.com | 2030-10-08 | Revoked | 96CC051C0841630A05FD7F274F6EFB723F857B8B8CFFC0676765C1013100D22D |
| SecureTrust TWG ECDSA P-384 Secure Email CA, Level 2 | SSL.com | 2030-10-08 | Revoked | 136A05614FDE8F94D8C1209B853F8F7FC487D233A280BD9902335DDB563EFDC5 |
| SecureTrust TWG ECDSA P-384 Secure Email CA, Level 1 | SSL.com | 2030-09-21 | Revoked | BC129EB22959BD5A8C980E4DA4116C4ABD4A36D3A3649F52CCF4A60D6DEDF4C2 |
| SecureTrust TWG ECDSA P-384 Client CA, Level 2 | SSL.com | 2030-09-21 | Revoked | 397D802B65AFBF7E8F03D83A5F81013DAFF9638B07D9CD0A0AB9EA01A66FD395 |
| Trustwave Global ECDSA P-384 Timestamping CA, Level 1 | SSL.com | 2042-08-21 | Revoked | F75E65420AD6C018D915BBBA40A77122B30ACFD417DA3A885E4C4CD9E065A415 |
| Trustwave Global ECDSA P-384 Domain Validation CA, Level 1 | SSL.com | 2028-02-24 | Revoked | C63DF9618FBAF48662BA12ABE87B212CF777C27A446A0FA555D7A9D191148ED7 |
| Trustwave Global ECDSA P-384 Organization Validation CA, Level 1 | SSL.com | 2028-02-24 | Revoked | 87D42169B2693551CA205CCF17F06F6E6651F7218CD6D26607BF5BA4DD2F26F2 |
| Trustwave Global ECDSA P-384 Client CA, Level 1 | SSL.com | 2028-02-24 | Revoked | 84C15D35B6E2F2F41E4A45E87BD3E96C1953A4FEEF196E425C8046650A75CE07 |
| Trustwave Global ECDSA P-384 Code Signing CA, Level 1 | SSL.com | 2042-08-21 | Revoked | 7F2A890E8D9AFDB9C0F08AF1CB8DDA18C5802C5BEA50E0B18071D3CF973A46BD |
| Trustwave Global ECDSA P-384 Extended Validation CA, Level 1 | SSL.com | 2028-02-24 | Revoked | 29F8E104DF38E612BF4F505365B5D0B0B20DD4E89C908306484EB8374C1E66D8 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as Trustwave Global ECC P384 Certification Authority with a different issuer, so a client has to carry Trustwave Global ECC P384 Certification Authority itself in its root store to trust it.


## What happens when it expires

Trustwave Global ECC P384 Certification Authority is valid until 2042-08-23, about 15.8 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is Trustwave Global ECC P384 Certification Authority trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Apple, Microsoft trust it for TLS server authentication; Chrome, Mozilla do not.

**When does Trustwave Global ECC P384 Certification Authority expire?**

On 2042-08-23, about 15.8 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has Trustwave Global ECC P384 Certification Authority issued?**

The CCADB lists 15: 1 valid, 0 expired and 14 revoked. The newest valid one is SSL.com TLS ECC Root CA 2022, valid until 2042-08-21.

**Is Trustwave Global ECC P384 Certification Authority cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).