# SwissSign Silver CA - G2 root certificate (SwissSign AG)

> SwissSign Silver CA - G2 is a root CA certificate operated by SwissSign AG (RSA 4096, valid until 2036-10-25, SHA-256 BE6C4DA2). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Apple, Microsoft.

Source: https://ssl.sh/roots/swisssign-silver-ca-g2/
Last updated: 2026-11-10

SwissSign Silver CA - G2 is a root CA certificate operated by SwissSign AG (RSA 4096, valid until 2036-10-25, SHA-256 BE6C4DA2). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Apple, Microsoft.

| Field | Value |
|---|---|
| CA owner | SwissSign AG |
| Subject | CN=SwissSign Silver CA - G2,O=SwissSign AG,C=CH |
| SHA-256 | BE6C4DA2BBB9BA59B6F3939768374246C3C005993FA98F020D1DEDBED48A81D5 |
| SPKI SHA-256 | 9318226F8C83AFE47F5F47C24F59CE12DBA8C73B181BEE6B2EA1F40A06BC1869 |
| Valid from | 2006-10-25 |
| Expires | 2036-10-25 |
| Key | RSA 4096 |
| Signature algorithm | sha1WithRSAEncryption |
| Serial number | 4F1BD42F54BB2F4B |
| SHA-1 (Windows thumbprint) | 9BAAE59F56EE21CB435ABE2593DFA7F040D11DCB |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Removed | No | - | - |
| Mozilla | Removed | No | - | - |
| Apple | Included | Yes | - | Trust bits: serverAuth, clientAuth, emailProtection |
| Microsoft | Included (NotBefore cutoff) | Yes | - | Trusted EKUs: Server Authentication, Client Authentication, Code Signing, Secure Email |

The CCADB lists no EV policy OID for SwissSign Silver CA - G2.

## Intermediate CAs issued by this root

The CCADB lists 12 intermediate CA certificates signed directly by SwissSign Silver CA - G2: 0 currently valid, 2 expired and 10 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| AffirmTrust Networking | SwissSign AG | 2017-11-01 | Expired | 671A97861D242968A77EB6FE382BDEF0C6D2E25D99D23202ACD13FE9BBCDCF48 |
| Trend Micro Silver CA | SwissSign AG | 2017-11-01 | Expired | 2C2BECF013B5EE905094C1D63C652C0BF3CCE11DCF698F91AF76A839499AF601 |
| SwissSign Personal Silver CA 2014 - G22 | SwissSign AG | 2029-09-15 | Revoked | C9E40F4E83396F34A7C861817B4EDAB3DC1F8BAC699FD50CB261FA9123D55EF4 |
| SwissSign Server Silver CA 2014 - G22 | SwissSign AG | 2029-09-15 | Revoked | 67F91F26F5BFBFA48738BE0678DD2F8F75F7B80761D5656783CA8B920AAA5659 |
| SwissSign Server Silver CA 2014 - G22 | SwissSign AG | 2029-09-11 | Revoked | 73942E29DF7DF03440A880A94435A5941856779741B6E102BA41A586D01ACA02 |
| SwissSign Personal Silver CA 2014 - G22 | SwissSign AG | 2029-09-11 | Revoked | 042C80330DDBC2FC09DDF49C93B89F0F16F81A2C13C736B1D37CA3F031FEECAA |
| DOUGLAS Group CA - G1 | SwissSign AG | 2026-09-29 | Revoked | C12E3333F5A4D4C2A9F364995E581FA02FC7EFF16F37C373ACF81CDABE04B49A |
| Helsana Gruppe Service ICA 01 | SwissSign AG | 2023-03-21 | Revoked | D8B9EC672715CC5B566669CBC643ECCCAE1A30E26974DCE952456026D07945DD |
| AffirmTrust Networking | SwissSign AG | 2019-11-02 | Revoked | 3156CB7FE72C051B5AFB2C17F5AEA75AF810D04A0757293974925ECE5356DFC4 |
| Trend Micro Silver CA | SwissSign AG | 2019-11-02 | Revoked | 0C7E4FE087D526D70C3FD32C6EFA3D018275917644137015D4EA3669BE820A4B |
| SwissSign Personal Silver CA 2008 - G2 | SwissSign AG | 2023-07-09 | Revoked | FA397DE8DB6F110A7FA34D101BAC8A914750F53B0223A8BD2FB812E757155C20 |
| SwissSign Server Silver CA 2008 - G2 | SwissSign AG | 2023-07-07 | Revoked | 06E5DEC31C91D7D33435201D2E22116C207193A874E0A426532A2F69530C86B5 |

## Cross-signed versions

No certificate in the CCADB has the same subject and public key as SwissSign Silver CA - G2 with a different issuer, so a client has to carry SwissSign Silver CA - G2 itself in its root store to trust it.


## What happens when it expires

SwissSign Silver CA - G2 is valid until 2036-10-25, about 10.0 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is SwissSign Silver CA - G2 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Apple, Microsoft trust it for TLS server authentication; Chrome, Mozilla do not.

**When does SwissSign Silver CA - G2 expire?**

On 2036-10-25, about 10.0 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has SwissSign Silver CA - G2 issued?**

The CCADB lists 12: 0 valid, 2 expired and 10 revoked.

**Is SwissSign Silver CA - G2 cross-signed?**

No. The CCADB has no certificate with the same subject and public key signed by another CA.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).