DigiCert Roots and Intermediates

All active roots on this page are covered in our Certification Practice Statement (CPS).

Terms of Usage

You may download, use and distribute the Root Certificates only under the terms of the Root Certificate License Agreement (PDF). There is no charge for use under these terms and you are not required to sign the agreement to make use of the Root Certificates. If you require a signed agreement per your company policy, please provide the information requested in the agreement and email a signed copy to DL-TSS-Root@digicert.com. You will receive a counter-signed copy for your records.

To learn more or buy DigiCert TLS/SSL, visit our TLS/SSL product page.

DISCLAIMER: ROOT CERTIFICATES, AND ANY UPDATES, ARE PROVIDED "AS-IS" WITH NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT OF THIRD PARTY RIGHTS.

Active Roots
VeriSign Class 1 Public Primary CA (PCA)
Subject DN: C = US, O = VeriSign, Inc., OU = Class 1 Public Primary Certification Authority
Operational Start Date: Jan 29 00:00:00 1996 GMT
Operational End Date: Aug 2 23:59:59 2028 GMT
Key Size: 1024 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 3f 69 1e 81 9c f0 9a 4a f3 73 ff b9 48 a2 e4 dd
SHA-1 Thumbprint: ce 6a 64 a3 09 e4 2f bb d9 85 1c 45 3e 64 09 ea e8 7d 60 f1
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Class-1-Public-Primary-Certification-Authority.pem
VeriSign Class 2 Public PCA
Subject DN: C = US, O = VeriSign, Inc., OU = Class 2 Public Primary Certification Authority
Operational Start Date: Jan 29 00:00:00 1996 GMT
Operational End Date: Aug 2 23:59:59 2028 GMT
Key Size: 1024 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 0a ba 1e 00 62 32 e8 b4 36 26 5d 1f 7c cd 89 66
SHA-1 Thumbprint: 57 f0 3d ce fb 45 69 4c 1c 25 e6 ee a0 2c 43 d7 52 38 d3 c4
Hierarchy: Client Auth/Email
VeriSign Class 3 Public PCA - G1.5
Subject DN: C = US, O = VeriSign, Inc., OU = Class 3 Public Primary Certification Authority
Operational Start Date: Jan 29 00:00:00 1996 GMT
Operational End Date: Aug 2 23:59:59 2028 GMT
Key Size: 1024 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 3c 91 31 cb 1f f6 d0 1b 0e 9a b8 d0 44 bf 12 be
SHA-1 Thumbprint: a1 db 63 93 91 6f 17 e4 18 55 09 40 04 15 c7 02 40 b0 ae 6b
Hierarchy: CodeSigning,Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Class-3-Public-Primary-Certification-Authority.pem
VeriSign Class 1 Public PCA -Generation 2 (G2)
Subject DN: C = US, O = VeriSign, Inc., OU = Class 1 Public Primary Certification Authority - G2, OU = (c) 1998 VeriSign, Inc. - For authorized use only, OU = VeriSign Trust Network
Operational Start Date: May 18 00:00:00 1998 GMT
Operational End Date: Aug 1 23:59:59 2028 GMT
Key Size: 1024 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 4c c7 ea aa 98 3e 71 d3 93 10 f8 3d 3a 89 91 92
SHA-1 Thumbprint: 27 3e e1 24 57 fd c4 f9 0c 55 e8 2b 56 16 7f 62 f5 32 e5 47
Hierarchy: Client Auth/Email
VeriSign Class 2 Public PCA - G2
Subject DN: C = US, O = VeriSign, Inc., OU = Class 2 Public Primary Certification Authority - G2, OU = (c) 1998 VeriSign, Inc. - For authorized use only, OU = VeriSign Trust Network
Operational Start Date: May 18 00:00:00 1998 GMT
Operational End Date: Aug 1 23:59:59 2028 GMT
Key Size: 1024 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 00 b9 2f 60 cc 88 9f a1 7a 46 09 b8 5b 70 6c 8a af
SHA-1 Thumbprint: b3 ea c4 47 76 c9 c8 1c ea f2 9d 95 b6 cc a0 08 1b 67 ec 9d
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Class-2-Public-Primary-Certification-Authority-G2.pem
VeriSign Class 3 Public PCA - G2
Subject DN: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
Operational Start Date: May 18 00:00:00 1998 GMT
Operational End Date: Aug 1 23:59:59 2028 GMT
Key Size: 1024 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 7d d9 fe 07 cf a8 1e b7 10 79 67 fb a7 89 34 c6
SHA-1 Thumbprint: 85 37 1C A6 E5 50 14 3D CE 28 03 47 1B DE 3A 09 E8 F8 77 0F
Hierarchy: CodeSigning
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Class-3-Public-Primary-Certification-Authority-G2.pem
VeriSign Class 1 Public PCA - Generation 3 (G3)
Subject DN: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 1 Public Primary Certification Authority - G3
Operational Start Date: Oct 1 00:00:00 1999 GMT
Operational End Date: Jul 16 23:59:59 2036 GMT
Key Size: 2048 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 8b 5b 75 56 84 54 85 0b 00 cf af 38 48 ce b1 a4
SHA-1 Thumbprint: 20 42 85 DC F7 EB 76 41 95 57 8E 13 6B D4 B7 D1 E9 8E 46 A5
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/VeriSign-Class-1-Public-Primary-Certification-Authority-G3.pem
VeriSign Class 2 Public PCA - G3
Subject DN: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 2 Public Primary Certification Authority - G3
Operational Start Date: Oct 1 00:00:00 1999 GMT
Operational End Date: Jul 16 23:59:59 2036 GMT
Key Size: 2048 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 61 70 cb 49 8c 5f 98 45 29 e7 b0 a6 d9 50 5b 7a
SHA-1 Thumbprint: 61 EF 43 D7 7F CA D4 61 51 BC 98 E0 C3 59 12 AF 9F EB 63 11
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/VeriSign-Class-2-Public-Primary-Certification-Authority-G3.pem
VeriSign Class 3 Public PCA - G3
Subject DN: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
Operational Start Date: Oct 1 00:00:00 1999 GMT
Operational End Date: Jul 16 23:59:59 2036 GMT
Key Size: 2048 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 9b 7e 06 49 a3 3e 62 b9 d5 ee 90 48 71 29 ef 57
SHA-1 Thumbprint: 13 2D 0D 45 53 4B 69 97 CD B2 D5 C3 39 E2 55 76 60 9B 5C C6
Hierarchy: Public TLS / SSL, CodeSigning, Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/VeriSign-Class-3-Public-Primary-Certification-Authority-G3.pem
VeriSign Class 3 Public PCA - Generation 4 (G4)
Subject DN: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2007 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G4
Operational Start Date: Nov 5 00:00:00 2007 GMT
Operational End Date: Jan 18 23:59:59 2038 GMT
Key Size: 384 bit
Signature Algorithm: ecdsa-with-SHA384
Serial Number: 2f 80 fe 23 8c 0e 22 0f 48 67 12 28 91 87 ac b3
SHA-1 Thumbprint: 22 D5 D8 DF 8F 02 31 D1 8D F7 9D B7 CF 8A 2D 64 C9 3F 6C 3A
Hierarchy: Public TLS / SSL, CodeSigning, Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/VeriSign-Class-3-Public-Primary-Certification-Authority-G4.pem
VeriSign Class 3 Public PCA - Generation 5 (G5)
Subject DN: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
Operational Start Date: Nov 8 00:00:00 2006 GMT
Operational End Date: Jul 16 23:59:59 2036 GMT
Key Size: 2048 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 18 da d1 9e 26 7d e8 bb 4a 21 58 cd cc 6b 3b 4a
SHA-1 Thumbprint: 4E B6 D5 78 49 9B 1C CF 5F 58 1E AD 56 BE 3D 9B 67 44 A5 E5
Hierarchy: Public TLS / SSL, CodeSigning, Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/VeriSign-Class%203-Public-Primary-Certification-Authority-G5.pem
VeriSign Universal Root Certification Authority
Subject DN: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
Operational Start Date: Apr 2 00:00:00 2008 GMT
Operational End Date: Dec 1 23:59:59 2037 GMT
Key Size: 2048 bit
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 40 1a c4 64 21 b3 13 21 03 0e bb e4 12 1a c5 1d
SHA-1 Thumbprint: 36 79 CA 35 66 87 72 30 4D 30 A5 FB 87 3B 0F A7 7B B7 0D 54
Hierarchy: Public TLS / SSL, CodeSigning, Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/VeriSign-Universal-Root-Certification-Authority.pem
Symantec Class 1 Public PCA - Generation 4 (G4)
Subject DN: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 1 Public Primary Certification Authority - G4
Operational Start Date: Oct 5 00:00:00 2011 GMT
Operational End Date: Jan 18 23:59:59 2038 GMT
Key Size: 384 bit
Signature Algorithm: ecdsa-with-SHA384
Serial Number: 21 6e 33 a5 cb d3 88 a4 6f 29 07 b4 27 3c c4 d8
SHA-1 Thumbprint: 84 F2 E3 DD 83 13 3E A9 1D 19 52 7F 02 D7 29 BF C1 5F E6 67
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Symantec_PCA_1_G4.pem
Symantec Class 2 Public PCA - G4
Subject DN: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 2 Public Primary Certification Authority - G4
Operational Start Date: Oct 5 00:00:00 2011 GMT
Operational End Date: Jan 18 23:59:59 2038 GMT
Key Size: 384 bit
Signature Algorithm: ecdsa-with-SHA384
Serial Number: 34 17 65 12 40 3b b7 56 80 2d 80 cb 79 55 a6 1e
SHA-1 Thumbprint: 67 24 90 2E 48 01 B0 22 96 40 10 46 B4 B1 67 2C A9 75 FD 2B
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Symantec_PCA_2_G4.pem
Symantec Class 3 Public PCA - G4
Subject DN: C=US, O=Symantec Corporation, Symantec Trust Network, CN=Symantec Class 3 Public Primary Certification Authority - G4
Operational Start Date: Oct 17 00:00:00 2012 GMT
Operational End Date: Dec 1 23:59:59 2037 GMT
Key Size: 384 bit
Signature Algorithm: ecdsa-with-SHA384
Serial Number: 4c 79 b5 9a 28 9c 76 31 64 f5 89 44 d0 91 02 de
SHA-1 Thumbprint: 22 D5 D8 DF 8F 02 31 D1 8D F7 9D B7 CF 8A 2D 64 C9 3F 6C 3A
Hierarchy: Public TLS / SSL, CodeSigning, Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Symantec_PCA_3_G4.pem
Symantec Class 1 Public PCA - Generation 6 (G6)
Subject DN: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 1 Public Primary Certification Authority - G6
Operational Start Date: Oct 18 00:00:00 2011 GMT
Operational End Date: Dec 1 23:59:59 2037 GMT
Key Size: 2048 bit
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 24 32 75 f2 1d 2f d2 09 33 f7 b4 6a ca d0 f3 98
SHA-1 Thumbprint: 51 7F 61 1E 29 91 6B 53 82 FB 72 E7 44 D9 8D C3 CC 53 6D 64
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/PCA_1_G6.pem
Symantec Class 2 Public PCA - G6
Subject DN: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 2 Public Primary Certification Authority - G6
Operational Start Date: Oct 18 00:00:00 2011 GMT
Operational End Date: Dec 1 23:59:59 2037 GMT
Key size: 2048 bit
Signature Algorithm: sha256WithRSAEncryption
Serial Number: 64 82 9e fc 37 1e 74 5d fc 97 ff 97 c8 b1 ff 41
SHA-1 Thumbprint: 40 B3 31 A0 E9 BF E8 55 BC 39 93 CA 70 4F 4E C2 51 D4 1D 8F
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/PCA_2_G6.pem
Symantec Class 3 Public PCA - G6
Subject DN: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Public Primary Certification Authority - G6
Operational Start Date: Oct 18 00:00:00 2012 GMT
Operational End Date: Dec 1 23:59:59 2037 GMT
Key Size: 4096 bit
Signature Algorithm: sha384WithRSAEncryption
Serial Number: 65 63 71 85 d3 6f 45 c6 8f 7f 31 f9 09 87 92 82
SHA-1 Thumbprint: 26 A1 6C 23 5A 24 72 22 9B 23 62 80 25 BC 80 97 C8 85 24 A1
Hierarchy: Public TLS / SSL, CodeSigning, Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Symantec_PCA_3_G6.pem
Symantec Class 1 Public PCA - Generation 7 (G7)
Subject DN: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 1 Public Primary Certification Authority - G7
Operational Start Date: Oct 15 00:00:00 2012 GMT
Operational End Date: Dec 1 23:59:59 2037 GMT
Key Size: 2048 bit
Signature Algorithm: dsa_with_SHA256
Serial Number: 65 3d d7 cc 70 2a 50 30 9e 2f 70 c2 5f 1b d3 79
SHA-1 Thumbprint: 79 19 7E 49 7C 60 C6 15 0C 64 DD C0 40 7C FD 9C 3E C2 FB FE
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Symantec_PCA_1_G7.pem
Symantec Class 2 Public PCA - G7
Subject DN: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 2 Public Primary Certification Authority - G7
Operational Start Date: Oct 15 00:00:00 2012 GMT
Operational End Date: Dec 1 23:59:59 2037 GMT
Key Size: 2048 bit
Signature Algorithm: dsa_with_SHA256
Serial Number: 60 ce 3f 73 2f c8 3e 92 ec e4 4d 70 a5 75 e2 04
SHA-1 Thumbprint: 1C A3 7B B1 B7 57 BC 8F 90 FC 20 C0 96 C0 0A D2 D4 66 DB 63
Hierarchy: Client Auth/Email
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Symantec_PCA_2_G7.pem
Symantec Class 3 Public PCA - G7
Subject DN: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Public Primary Certification Authority - G7
Operational Start Date: Oct 15 00:00:00 2012 GMT
Operational End Date: Dec 1 23:59:59 2037 GMT
Key Size: 2048 bit
Signature Algorithm: dsa_with_SHA256
Serial Number: 08 52 68 30 2e be 7a 29 38 63 73 22 df e5 52 0c
SHA-1 Thumbprint: 75 92 75 24 04 90 C9 E4 03 F3 B4 86 99 40 33 FF F4 D7 E5 66
Hierarchy: Public TLS / SSL
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/Symantec_PCA_3_G7.pem

Retired Roots
VeriSign Class 3 Public PCA
Subject DN: C = US, O = VeriSign, Inc., OU = Class 3 Public Primary Certification Authority
Operational Start Date: Jan 29 00:00:00 1996 GMT
Operational End Date: Aug 1 23:59:59 2028 GMT
Key Size: 1024 bit
Signature Algorithm: md2WithRSAEncryption
Serial Number: 70 ba e4 1d 10 d9 29 34 b6 38 ca 7b 03 cc ba bf
SHA-1 Thumbprint: 74 2c 31 92 e6 07 e4 24 eb 45 49 54 2b e1 bb c5 3e 61 74 e2
Hierarchy: CodeSigning, Client Auth/Email
VeriSign Class 4 Public PCA - G2
Subject DN: C = US, O = VeriSign, Inc., OU = Class 4 Public Primary Certification Authority - G2, OU = (c) 1998 VeriSign, Inc. - For authorized use onlyOU = VeriSign Trust Network
Operational Start Date: May 18 00:00:00 1998 GMT
Operational End Date: Aug 1 23:59:59 2028 GMT
Key Size: 1024 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 32 88 8e 9a d2 f5 eb 13 47 f8 7f c4 20 37 25 f8
SHA-1 Thumbprint: 0b 77 be bb cb 7a a2 47 05 de cc 0f bd 6a 02 fc 7a bd 9b 52
VeriSign Class 4 Public PCA - G3
Subject DN: C = US, O = VeriSign, Inc., OU = VeriSign Trust Network, OU = (c) 1999 VeriSign, Inc. - For authorized use only, CN = VeriSign Class 4 Public Primary Certification Authority - G3
Operational Start Date: Oct 1 00:00:00 1999 GMT
Operational End Date: Jul 16 23:59:59 2036 GMT
Key Size: 2048 bit
Signature Algorithm: sha1WithRSAEncryption
Serial Number: 00 ec a0 a7 8b 6e 75 6a 01 cf c4 7c cc 2f 94 5e d7
SHA-1 Thumbprint: c8 ec 8c 87 92 69 cb 4b ab 39 e9 8d 7e 57 67 f3 14 95 73 9d
Root Download Link: https://www.websecurity.digicert.com/content/dam/websitesecurity/digitalassets/desktop/pdfs/roots/VeriSign-Class-4-Public-Primary-Certification-Authority-G3.pem
RSA Secure Server Certification Authority
Key Size: 1000 bit

We have updated our Privacy Policy.