Every SSL/TLS certificate traces its trust back through a chain — from your site’s certificate, through one or more intermediate certificates, up to a root certificate that browsers and operating systems inherently trust. Understanding this chain helps you install your certificate correctly and avoid trust errors.
GeoTrust Root Certificates
Since December 2017, all GeoTrust certificates are issued under DigiCert’s trusted root certificates. This means your GeoTrust certificate inherits the trust that DigiCert has built across browsers, operating systems, and devices worldwide.
See DigiCert Root Certificates
GeoTrust Intermediate Certificates
GeoTrust G5 TLS ECC P-384 SHA384 2022 CA1
Download PEM | Download DER/CRT
- Issuer: DigiCert TLS ECC P384 Root G5
- Expires: 25/May/2032
- Serial #: 06:C3:8C:EF:BB:76:40:E6:2D:74:D5:5A:EA:9A:7F:38
- SHA1 Fingerprint: 92:B6:19:24:44:A4:88:FF:71:17:14:49:68:01:39:A1:81:5E:AA:27
- SHA256 Fingerprint: 72:F1:04:08:4D:B7:91:4B:D8:AF:E6:E3:47:B9:25:7E:D4:C1:D7:FC:71:D3:F1:E5:1F:3C:F4:7B:73:9B:38:6A
GeoTrust G5 TLS RSA4096 SHA384 2022 CA1
Download PEM | Download DER/CRT
- Issuer: DigiCert TLS RSA4096 Root G5
- Expires: 25/May/2032
- Serial #: 0E:A7:1A:B4:B9:B3:0F:67:F5:A6:E6:31:76:9D:CE:9C
- SHA1 Fingerprint: FB:F6:84:7A:21:BA:2A:EB:EB:85:9E:54:70:81:BA:D8:D1:B3:FB:D3
- SHA256 Fingerprint: 00:30:C6:8C:53:FC:05:23:7F:CC:7A:B6:01:7D:81:FE:BB:A0:63:15:52:6C:57:F7:E7:29:07:C8:7B:98:2B:61
GeoTrust EV RSA CA 2018
Download PEM | Download DER/CRT
- Issuer: DigiCert High Assurance EV Root CA
- Expires: 06/Nov/2027
- Serial #: 03:FE:EF:1B:B5:B6:48:34:9A:20:95:0F:8B:C6:97:53
- SHA1 Fingerprint: A3:99:04:64:17:B6:7E:32:0D:3E:FA:69:D7:DC:E6:B8:BF:E8:A9:F2
- SHA256 Fingerprint: 18:5C:0A:E4:70:42:3B:9D:46:78:A7:C1:05:5B:5B:48:D9:07:05:50:5B:79:4E:21:5C:06:38:51:33:69:81:F4
GeoTrust RSA CA 2018
Download PEM | Download DER/CRT
- Issuer: DigiCert Global Root CA
- Expires: 06/Nov/2027
- Serial #: 05:46:FE:18:23:F7:E1:94:1D:A3:9F:CE:14:C4:61:73
- SHA1 Fingerprint: 7C:CC:2A:87:E3:94:9F:20:57:2B:18:48:29:80:50:5F:A9:0C:AC:3B
- SHA256 Fingerprint: 8C:C3:4E:11:C1:67:04:58:24:AD:E6:1C:49:07:A6:44:0E:DB:2C:43:98:E9:9C:11:2A:85:9D:66:1F:8E:2B:C7
GeoTrust TLS RSA CA G1
Download PEM | Download DER/CRT
- Issuer: DigiCert Global Root G2
- Expires: 02/Nov/2027
- Serial #: 0D:07:78:2A:13:3F:C6:F9:A5:72:96:E1:31:FF:D1:79
- SHA1 Fingerprint: 8B:3C:5B:9B:86:7D:4B:E4:6D:1C:B5:A0:1D:45:D6:7D:C8:E9:40:82
- SHA256 Fingerprint: C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E
GeoTrust TLS ECC CA G1
Download PEM | Download DER/CRT
- Issuer: DigiCert Global Root G3
- Expires: 02/Nov/2027
- Serial #: 03:4A:3F:F9:47:BE:39:C1:99:CE:B8:06:96:1E:51:6D
- SHA1 Fingerprint: BF:E7:BA:21:A2:FA:56:71:9B:61:F6:4E:E1:B2:69:D0:B8:0B:44:E5
- SHA256 Fingerprint: A8:38:40:5E:BB:03:F5:DF:D8:D4:A9:57:2A:E6:E0:E3:F3:56:EC:4E:C1:34:37:5A:59:DB:7B:19:5D:C3:EC:44
GeoTrust EV RSA CA G2
Download PEM | Download DER/CRT
- Issuer: DigiCert Global Root G2
- Expires: 02/July/2030
- Serial #: 0D:60:12:62:C8:A7:72:1A:6E:AB:03:61:E5:61:95:80
- SHA1 Fingerprint: 68:7D:4A:4D:47:01:4F:91:21:7E:4A:06:2B:BF:9D:23:83:58:94:3E
- SHA256 Fingerprint: 2D:14:0F:20:B8:A9:6E:2B:4D:2F:1C:C5:AC:A5:E5:A1:E7:DC:56:A7:49:1E:51:09:06:96:0F:38:D2:D2:1A:EF
Installing the Intermediate Certificate
If the intermediate certificate is missing or incorrect, browsers will display a “certificate not trusted” warning, even if your root certificate is fine. Most modern web servers handle the certificate chain automatically, but in some environments you will need to manually install the intermediate certificate alongside your SSL certificate:
- Download the intermediate certificate bundle from your GeoTrust account (the intermediate certificate is included in the zip file when you download your SSL certificate) or from the DigiCert root certificate repository.
- Combine the intermediate with your SSL certificate file as required by your server software (Apache, NGINX, IIS, etc.).
- Restart your server and verify the chain using an SSL checker tool.
Refer to the installation guide for your specific server environment for detailed instructions.