# Telia EC TLS Root CA v3 root certificate (Telia Company)

> Telia EC TLS Root CA v3 is a root CA certificate operated by Telia Company (ECDSA P-384, valid until 2048-05-23, SHA-256 098E08A9). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Mozilla, Microsoft.

Source: https://ssl.sh/roots/telia-ec-tls-root-ca-v3/
Last updated: 2026-11-10

Telia EC TLS Root CA v3 is a root CA certificate operated by Telia Company (ECDSA P-384, valid until 2048-05-23, SHA-256 098E08A9). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Mozilla, Microsoft.

| Field | Value |
|---|---|
| CA owner | Telia Company |
| Subject | CN=Telia EC TLS Root CA v3,O=Telia Company AB,C=SE |
| SHA-256 | 098E08A91DBBF77478B96CCEB89B1413A5DA37B7C862606A955DEB07179F4326 |
| SPKI SHA-256 | 4C821D7D89ADF08C1E951C92B841B4A3C18261B9CE426F337CC0E3805499BA0E |
| Valid from | 2023-11-15 |
| Expires | 2048-05-23 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA384 |
| Serial number | 18BD22254634D048B6CE5471FD2B5 |
| SHA-1 (Windows thumbprint) | B4D607C2A595BC5BF4674DC9DC6F6F0A007AA535 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Not included | No | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites; EV policy OIDs: not EV-enabled; First included in: 3.126 / 154; Inclusion bug: #1968852 |
| Apple | Not included | No | - | - |
| Microsoft | Included | Yes | - | Trusted EKUs: Server Authentication |

The CCADB lists no EV policy OID for Telia EC TLS Root CA v3.

## Intermediate CAs issued by this root

The CCADB lists 1 intermediate CA certificates signed directly by Telia EC TLS Root CA v3: 1 currently valid, 0 expired and 0 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| Telia EC DV CA v4 | Telia Company | 2048-05-23 | Valid | 69E4AA2C42958ADABC4B171A41C2D9E7B2EB7C91772FBD4B5EFB1C845CD52FAF |

## Cross-signed versions

4 certificate(s) in the CCADB have the same subject and public key as Telia EC TLS Root CA v3 but a different issuer. A server can send one of them so that clients which trust the issuing root, but not Telia EC TLS Root CA v3, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| Telia Root CA v2 | Telia Company | 2043-11-28 | Valid | 70F84634C3246A43E9722CB1E0ABC5BB9BCA62FFFB70EB7EA73F4BB706C853C1 |
| Telia Root CA v2 | Telia Company | 2043-11-28 | Revoked | 9DBD8D9A36695D6A3727F2BE8FE7B4275A62A9F8DC7927A32C476F7DECE27E28 |
| Telia Root CA v2 | Telia Company | 2043-11-28 | Revoked | 07E5866107E24AE69A9679668F916AA1B3B39DC3554781E3AE9ABAA44B5A7BC4 |
| Telia Root CA v2 | Telia Company | 2043-11-28 | Revoked | 607FD06E4C56534DC47A22565B9AE0859C61915858BF43BC42D8628212936DEA |

## What happens when it expires

Telia EC TLS Root CA v3 is valid until 2048-05-23, about 21.5 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is Telia EC TLS Root CA v3 trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Mozilla, Microsoft trust it for TLS server authentication; Chrome, Apple do not.

**When does Telia EC TLS Root CA v3 expire?**

On 2048-05-23, about 21.5 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has Telia EC TLS Root CA v3 issued?**

The CCADB lists 1: 1 valid, 0 expired and 0 revoked. The newest valid one is Telia EC DV CA v4, valid until 2048-05-23.

**Is Telia EC TLS Root CA v3 cross-signed?**

Yes. The CCADB has 4 cross-certificate(s) with its subject and key, signed by Telia Root CA v2; 1 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).