# GDCA TrustAUTH R5 ROOT 根证书（Global Digital Cybersecurity Authority (GDCA)）

> GDCA TrustAUTH R5 ROOT 是 Global Digital Cybersecurity Authority (GDCA) 运营的根证书（RSA 4096，有效期至 2040-12-31，SHA-256 BFFF8FD0）。按最新 CCADB 数据，4 个主流根存储中有 4 个信任它用于 TLS 服务器认证：Chrome, Mozilla, Apple, Microsoft。

Source: https://ssl.sh/zh/roots/gdca-trustauth-r5-root/
Last updated: 2026-11-10

GDCA TrustAUTH R5 ROOT 是 Global Digital Cybersecurity Authority (GDCA) 运营的根证书（RSA 4096，有效期至 2040-12-31，SHA-256 BFFF8FD0）。按最新 CCADB 数据，4 个主流根存储中有 4 个信任它用于 TLS 服务器认证：Chrome, Mozilla, Apple, Microsoft。

| 字段 | 值 |
|---|---|
| CA 所有者 | Global Digital Cybersecurity Authority (GDCA) |
| 主题（Subject） | CN=GDCA TrustAUTH R5 ROOT,O=GUANG DONG CERTIFICATE AUTHORITY CO.\,LTD.,C=CN |
| SHA-256 | BFFF8FD04433487D6A8AA60C1A29767A9FC2BBB05E420F713A13B992891D3893 |
| SPKI SHA-256 | CEB19411C65052C757F941EB826C96941E4D08D096C7DB7E7EA3C4F8C13F1A13 |
| 生效时间 | 2014-11-26 |
| 到期时间 | 2040-12-31 |
| 密钥 | RSA 4096 |
| 签名算法 | sha256WithRSAEncryption |
| 序列号 | 7D0997FEF047EA7A |
| SHA-1（Windows 指纹） | 0F36385B811A25C39B314E83CAE9346670CC74B4 |

## 根存储收录状态

| 根存储 | 状态 | 信任用于 TLS | TLS 不信任起始日 | 详细信息 |
|---|---|---|---|---|
| Chrome | 已收录 | 是 | - | - |
| Mozilla | 已收录 | 是 | - | 信任位: Websites; EV 策略 OID: 1.2.156.112559.1.1.6.1; 首次收录版本: NSS 3.34 / Firefox 58; 收录申请 bug: #1128392 |
| Apple | 已收录 | 是 | - | 信任位: serverAuth、clientAuth、emailProtection |
| Microsoft | 已收录 | 是 | - | 信任的扩展密钥用途: Server Authentication、Client Authentication、Code Signing、Document Signing、Encrypting File System、Secure Email、Time Stamping; NotBefore 截止: 2026-05-19 (Encrypting File System、Secure Email) |

Mozilla 把它作为 EV 根证书，对应的 EV 策略 OID 是 1.2.156.112559.1.1.6.1。

## 这张根证书签发的中间证书

CCADB 登记了 22 张由 GDCA TrustAUTH R5 ROOT 直接签发的中间证书：3 张仍有效，0 张已过期，19 张已吊销（含上级证书被吊销的）。

| 中间证书 | 运营者 | 到期时间 | 状态 | SHA-256 |
|---|---|---|---|---|
| GDCA TrustAUTH R4 EV SSL CA2 | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2029-10-31 | 有效 | 9DBD662B8272B3D04AA235074F729C677C59ACBE0831A22D0FDFAA787986B1C6 |
| GDCA TrustAUTH R4 DV SSL CA2 | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2029-10-31 | 有效 | 5599662C0B3B37ADD214F0E4FEF7133FDE5916DA62D6772D4D3452EE55579F6A |
| GDCA TrustAUTH R4 OV SSL CA2 | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2029-10-31 | 有效 | 28C715A15710E9FF062386C35F89FECF812E521BF403F0DD91B14254AC3BE795 |
| GDCA TrustAUTH R4 OV SSL CA2 | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2036-12-30 | 已吊销 | 9B69C6ECDA5593C4551613073A1D56563EFA342BADF3E794BD03D5DCFF97057C |
| GDCA TrustAUTH R4 EV SSL CA2 | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2036-12-30 | 已吊销 | 422952C2BC58A4671AF5E8ACB26EFFA55532F4051EE88F3F1AD019FC7F2B8722 |
| GDCA TrustAUTH R4 DV SSL CA2 | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2036-12-30 | 已吊销 | 2F7D8EEAB71116CDBC574B2D943D22403D3B8B26E3C7ABDB68F2D8CB49C2D0DF |
| GDCA TrustAUTH R4 CodeSigning CA2 | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2040-02-10 | 已吊销 | 463562D1F84267AA253EE1CB1FF6F1808C349CE38FF10E9DBB0794EFA7CAE401 |
| GDCA TrustAUTH R4 TimeStamp CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2035-12-31 | 已吊销 | 4FBCDFC8184C41523CEBA58A4F3BAFD36ECADACC11ECA148AA24C774C8E4B47B |
| GDCA TrustAUTH R4 Plus EV CodeSigning CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2035-12-31 | 已吊销 | 3B39A01EB6DD0C0E870359F01AFB66665E0D5C24080291A0769D7F0FB4BB0E4E |
| GDCA TrustAUTH R4 EV CodeSigning CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 882E0146D15D3483EE5981E35067F1449E562B89E22ECC3FDF37274EDD314CDA |
| GDCA TrustAUTH R4 Generic CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 5DB60C2D6B6BECF314477589A3A4FB4CCF84649D69B0B21B3D6B2ABA78BD35FB |
| GDCA TrustAUTH R4 CodeSigning CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 051C238FAD7C1DC0FCEB4AEF79CAE97FE49A82DA8916A4A0920F307AACD60F81 |
| GDCA TrustAUTH R4 EV SSL CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 96A5A2CD39800CFB6A2A830EE52DCF47FBB00FF1B03204DB36915CEA31F13342 |
| GDCA TrustAUTH R4 OV SSL CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 5600AFB6BAE2A83B66B9CBBE9CEEC8F53E26420A69939A48DCC6D56B99790A63 |
| GDCA TrustAUTH R4 IV SSL CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 99442C8F83A3C5090CA50C1C0B1DE4B32ED418FF0AA7C3240E91230159F3E7BF |
| GDCA TrustAUTH R4 DV SSL CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 74468180CE564BAD7E812210AF743E85CA96CBA44CF5851FA00082341B2535F5 |
| GDCA TrustAUTH R4 Primer CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 3253412FDAD4523108C098BB0EE0EFEDD7FAFDD00FB30E47C6BBA9FE3E1CDB88 |
| GDCA TrustAUTH R4 Extended Validation CodeSigning CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | BEC06F55344C3DE4F12CD5D808906CDE275234951BE0176A787E628E2BE7D51F |
| GDCA TrustAUTH R4 Generic CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 86C6707BBE27CDE1215E25D3F8146A522281E18C45DF2CB8C6FB7A03C1733510 |
| GDCA TrustAUTH R4 Extended Validation SSL CA | Global Digital Cybersecurity Authority Co., Ltd. (Formerly Guang Dong Certificate Authority (GDCA)) | 2030-12-30 | 已吊销 | 55324A9832512FC6C99F15BF0E9ED3D6BEB4398CCEE194B7FF849D96D9130D44 |

## 交叉签名

CCADB 中没有与 GDCA TrustAUTH R5 ROOT 主题和公钥相同、签发者不同的证书，客户端必须在自己的根存储里收录 GDCA TrustAUTH R5 ROOT 本身才会信任它。


## 到期会怎样

GDCA TrustAUTH R5 ROOT 的有效期到 2040-12-31，距本数据快照（2026-11-10）还有约 14.1 年。到期之后，会检查信任锚有效期的浏览器和操作系统不再接受以它结尾的证书链，只能链到它的证书都会验证失败。Android 是已知的例外：它不检查信任锚的到期日。

## 常见问题

**GDCA TrustAUTH R5 ROOT 被 Chrome、Firefox、Safari 和 Windows 信任吗？**

是的。截至 2026-11-10，Chrome、Mozilla（Firefox）、Apple（Safari）和微软（Windows）都信任它用于 TLS 服务器认证。

**GDCA TrustAUTH R5 ROOT 什么时候到期？**

2040-12-31 到期，距 2026-11-10 的数据快照约 14.1 年。

**GDCA TrustAUTH R5 ROOT 签发了多少张中间证书？**

CCADB 登记了 22 张：3 张有效，0 张已过期，19 张已吊销。 最新的有效中间证书是 GDCA TrustAUTH R4 EV SSL CA2，有效期到 2029-10-31。

**GDCA TrustAUTH R5 ROOT 有交叉签名吗？**

没有。CCADB 中没有其他 CA 用相同主题和公钥为它签发的证书。

来源：CCADB 的 TLS Server Authentication 报告、All Included Root Certificate Trust Bit Settings、All Certificate Information（V5）、各根存储的 TLS 报告和 Mozilla Included CA Certificate Report（ccadb.org/resources）。