# TrustAsia TLS ECC Root CA root certificate (TrustAsia)

> TrustAsia TLS ECC Root CA is a root CA certificate operated by TrustAsia (ECDSA P-384, valid until 2044-05-15, SHA-256 C0076B9E). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Chrome, Mozilla.

Source: https://ssl.sh/roots/trustasia-tls-ecc-root-ca/
Last updated: 2026-11-10

TrustAsia TLS ECC Root CA is a root CA certificate operated by TrustAsia (ECDSA P-384, valid until 2044-05-15, SHA-256 C0076B9E). As of the latest CCADB data it is trusted for TLS server authentication by 2 of 4 major root stores: Chrome, Mozilla.

| Field | Value |
|---|---|
| CA owner | TrustAsia |
| Subject | CN=TrustAsia TLS ECC Root CA,O=TrustAsia Technologies\, Inc.,C=CN |
| SHA-256 | C0076B9EF0531FB1A656D67C4EBE97CD5DBAA41EF44598ACC2489878C92D8711 |
| SPKI SHA-256 | F4632E58701C0BD7DAFC7E3831355EC433FC13777DE286683E8EC50964DF0452 |
| Valid from | 2024-05-15 |
| Expires | 2044-05-15 |
| Key | ECDSA P-384 |
| Signature algorithm | ecdsa-with-SHA384 |
| Serial number | 3674E14D7C6513C9AC835525A03E527E2F5068C7 |
| SHA-1 (Windows thumbprint) | B5EC39F3A16637AEC3059457E2BE11BEB7A17F36 |

## Root store status

| Root store | Status | Trusted for TLS | Distrust for TLS after | Details |
|---|---|---|---|---|
| Chrome | Included | Yes | - | - |
| Mozilla | Included | Yes | - | Trust bits: Websites; EV policy OIDs: 2.23.140.1.1; First included in: 3.114 / 142 |
| Apple | Not included | No | - | - |
| Microsoft | Not included | No | - | - |

Mozilla treats it as an EV root for policy OID 2.23.140.1.1.

## Intermediate CAs issued by this root

The CCADB lists 17 intermediate CA certificates signed directly by TrustAsia TLS ECC Root CA: 16 currently valid, 0 expired and 1 revoked (revoked includes those whose parent was revoked).

| Intermediate | Operated by | Expires | Status | SHA-256 |
|---|---|---|---|---|
| AutoCert TLS ECC CA 2026 | TrustAsia Technologies, Inc. | 2029-09-18 | Valid | 7CF0F87DCF219496EA61F69BC31358B9DA70579A1BCC879E8923BB5EBA4A78F8 |
| iTrust TLS ECC CA 2026 | TrustAsia Technologies, Inc. | 2029-09-18 | Valid | 41FB2B0E20B21C6F8B35162DAC09794C423EB7DDA7FC25FE12F6364420E9B4CB |
| Unicom TLS ECC CA 2026 | TrustAsia Technologies, Inc. | 2029-04-28 | Valid | D382F9ABD9494129B4F4E55C52A6DDEF195953CD2C871A01A53F3CBFCA57C4F2 |
| DNSPod DV TLS ECC CA 2026 | TrustAsia Technologies, Inc. | 2029-04-28 | Valid | 84347140085D4BBBFC42AAAFA211E5B5987E4E8C7490C25103D25EFEFA46CC1D |
| DNSPod TLS ECC CA 2026 | TrustAsia Technologies, Inc. | 2029-04-28 | Valid | 451B60A00619EE05A44CD0B16503E190256D525B61A8DCED14117330EAE6F8DB |
| Unicom DV TLS ECC CA 2026 | TrustAsia Technologies, Inc. | 2029-04-28 | Valid | 22308985643AAA31DEFD3B66AC3196E8F85141520D749C56BCA5357F36ECC166 |
| LiteSSL Pro ECC CA 2025 | TrustAsia Technologies, Inc. | 2030-10-21 | Valid | EF727545CA777621BA1707BA3BF15890ED123B088DC3384C2097871BF85FAE00 |
| XinNet EV TLS ECC CA 2025 | TrustAsia Technologies, Inc. | 2030-10-21 | Valid | CA87FC9758893E2F608966DE66EA5E6E8547046071A491807484E3BD0D9B8FD4 |
| 宝塔 TLS ECC CA 2025 | TrustAsia Technologies, Inc. | 2030-10-21 | Valid | 93582DD97B62EFBE54F6F435EE88C7129D01A7054FB3FBB818934FF674028959 |
| LiteSSL ECC CA 2025 | TrustAsia Technologies, Inc. | 2030-10-21 | Valid | 86C2A5EFB7A5C8D2C7654160F0C19EEAAA0E6AE43B249F0C4D17024CDC7D2939 |
| XinNet OV TLS ECC CA 2025 | TrustAsia Technologies, Inc. | 2030-10-21 | Valid | 62B54213496E9101FFAFC8FAB3E68357F79A259F67F3D7860FA76754AF5BF0DB |
| XinNet DV TLS ECC CA 2025 | TrustAsia Technologies, Inc. | 2030-10-21 | Valid | 444B2CBD5E5C0FB1910525B5C99363B03B6496EA4A0ACD03A081DA9821FDFCB7 |
| 宝塔 DV TLS ECC CA 2025 | TrustAsia Technologies, Inc. | 2030-10-21 | Valid | 02918B3CF1C362A12B07DE08E61C886693B4CE5C83FFA46936CB50FB9057B3FF |
| TrustAsia EV TLS ECC CA 2024 V2 | TrustAsia Technologies, Inc. | 2034-07-18 | Valid | D19E1FCD8E12747D75B74A28318EEFDD700F616E2B215701BBE804C3CDDA027B |
| TrustAsia DV TLS ECC CA 2024 | TrustAsia Technologies, Inc. | 2034-05-15 | Valid | 73E9BE7D57BD5C72A06304463D32F8F85ECA12E2F2D284E48AE83F653FDB4EB6 |
| TrustAsia OV TLS ECC CA 2024 | TrustAsia Technologies, Inc. | 2034-05-15 | Valid | 0E975E62A83030EAE3F441BAFFBFD7574FB7235EECB50F1F747DF8F0506D245E |
| TrustAsia EV TLS ECC CA 2024 | TrustAsia Technologies, Inc. | 2034-05-15 | Revoked | B00AE50AE1AC39990E1E189E052F37F3D80BDFA6E4DEA8FE990C07B60E64ED94 |

## Cross-signed versions

1 certificate(s) in the CCADB have the same subject and public key as TrustAsia TLS ECC Root CA but a different issuer. A server can send one of them so that clients which trust the issuing root, but not TrustAsia TLS ECC Root CA, can still build a chain.

| Signed by | CA owner | Expires | Status | SHA-256 |
|---|---|---|---|---|
| Certum Trusted Network CA | Asseco Data Systems S.A. | 2029-01-14 | Valid | FBE52F7D83E613D166F592A9227B08A9235E3DAA875FBA2ACD10A8C0D220DA2F |

## What happens when it expires

TrustAsia TLS ECC Root CA is valid until 2044-05-15, about 17.5 years after this data snapshot (2026-11-10). From that day, browsers and operating systems that check trust-anchor expiry stop accepting chains that end at this root, so any certificate that can only chain to it fails validation. Android is a known exception: it does not enforce the expiry date of trust anchors.

## FAQ

**Is TrustAsia TLS ECC Root CA trusted by Chrome, Firefox, Safari and Windows?**

As of 2026-11-10, Chrome, Mozilla trust it for TLS server authentication; Apple, Microsoft do not.

**When does TrustAsia TLS ECC Root CA expire?**

On 2044-05-15, about 17.5 years after the 2026-11-10 data snapshot.

**How many intermediate certificates has TrustAsia TLS ECC Root CA issued?**

The CCADB lists 17: 16 valid, 0 expired and 1 revoked. The newest valid one is AutoCert TLS ECC CA 2026, valid until 2029-09-18.

**Is TrustAsia TLS ECC Root CA cross-signed?**

Yes. The CCADB has 1 cross-certificate(s) with its subject and key, signed by Certum Trusted Network CA; 1 of them are still valid.

Sources: CCADB TLS Server Authentication report, All Included Root Certificate Trust Bit Settings, All Certificate Information (V5), the per-store TLS reports and Mozilla's Included CA Certificate Report (ccadb.org/resources).