Resources

GeoTrust Root Certificates

Licensing and Use of Root Certificates
You may download, use and distribute the Root Certificates only under the terms of the Root Certificate License Agreement (PDF). There is no charge for use under these terms and You are not required to sign the agreement to make use of the Root Certificates. If You require a signed agreement per your company policy, please provide the information requested in the agreement and email a signed copy to dl-tss-root@symantec.com. You will receive a counter-signed copy for your records.

DISCLAIMER: ROOT CERTIFICATES, AND ANY UPDATES, ARE PROVIDED “AS-IS” WITH NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT OF THIRD PARTY RIGHTS.

Root Certificates

GeoTrust Root Certificates (1 - 8)

Root 1 - Equifax Secure Certificate Authority Description: This root CA was the root used for all non-EV GeoTrust SSL Certificates up until July 22, 2010. This root will be needed to validate GeoTrust SSL certificates for many years to come and may still be used as part of a cross certification to ensure legacy applications continue to trust GeoTrust certificates. This root must continue to be included in root stores by vendors. Vendors should not plan on removing support for this root until officially advised that the root is no longer needed to support certificates or CRL validation. Download - Equifax Secure Certificate Authority (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	Equifax US 35:DE:F4:CF Sat Aug 22, 1998 to Wed Aug 22, 2018 (GMT) 67:CB:9D:C0:13:24:8A:82:9B:B2:17:1E:D1:1B:EC:D4 D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A 1024 https://ssltest15.bbtest.net

Root 2 - GeoTrust Global CA Description: Since July 22, 2010 this root is the primary root used for all non-EV GeoTrust SSL certificates and must be included in root stores. Download PEM format - GeoTrust Global CA (.pem file) Right Click, Save As Download Base-64 format - GeoTrust Global CA (.cer file)
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 23456 Tue May 21, 2002 to Sat May 21, 2022 (GMT) F7:75:AB:29:FB:51:4E:B7:77:5E:FF:05:3C:99:8E:F5 DE:28:F4:A4:FF:E5:B9:2F:A3:C5:03:D1:A3:49:A7:F9:96:2A:82:12 2048 https://ssltest11.bbtest.net

Root 3 - GeoTrust Primary Certification Authority Description: This root CA is the root used for GeoTrust Extended Validation SSL Certificates and must be included in root stores. Download - GeoTrust Primary CA (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 18 ac b5 6a fd 69 b6 15 3a 63 6c af da fa c4 a1 Sun, November 26, 2006 5:00:00 PM to Wed, July 16, 2036 4:59:59 PM 32 3c 11 8e 1b f7 b8 b6 52 54 e2 e2 10 0d d6 02 90 37 f0 96 2048 https://www.geotrust.com

Root 4 - GeoTrust Primary Certification Authority – G2 Description: This root CA is not used today. It is intended for use in the future for SSL and Code Signing services needing an ECC encryption algorithm. This root should be included in root stores. Download - GeoTrust Primary CA – G2 (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (SHA-1): Digital Verification via HTTPS:	GeoTrust Inc. US 3cb2f4480a00e2feeb243b5e603ec36b Sun, November 04, 2007 4:00:00 PM to Mon, January 18, 2038 3:59:59 PM 8d 17 84 d5 37 f3 03 7d ec 70 fe 57 8b 51 9a 99 e6 10 d7 b0 https://www.geotrust.com/resources/root_certificates/certificates/GeoTrust_Primary_CA_G2_ECC.pem

Root 5 - GeoTrust Primary Certification Authority – G3 Description: This root CA is not used today. It is intended for use in the future for SSL and Code Signing services needing an SHA256 encryption algorithm. This root should be included in root stores. Download - GeoTrust Primary CA – G3 (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (SHA-1): Digital Verification via HTTPS:	GeoTrust Inc. US 15 ac 6e 94 19 b2 79 4b 41 f6 27 a9 c3 18 0f 1f Tue, April 01, 2008 4:00:00 PM to Tue, December 01, 2037 3:59:59 PM 03 9e ed b8 0b e7 a0 3c 69 53 89 3b 20 d2 d9 32 3a 4c 2a fd https://ssltest21.bbtest.net

Root 6 - GeoTrust Universal CA Description: This root is not being used today. This root contains a 4096-bit key size and may be used in the future. It is intended for use in the future for SSL certificates requiring SHA 256 encryption algorithm. This root should be included in root stores. Download - GeoTrust Universal CA (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 01 Tue March 04, 2004 to Sun March 04, 2029 (GMT) 92:65:58:8B:A2:1A:31:72:73:68:5C:B4:A5:7A:07:48 e6:21:f3:35:43:79:05:9a:4b:68:30:9d:8a:2f:74:22:15:87:ec:79 4096 Not Available

Root 7 - Equifax Secure eBusiness CA-1 Description: This root is no longer used to sign new SSL certificates, but must be included in root stores to be able to validate valid certificates issued off this root. Download - Equifax Secure eBusiness CA-1 (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	Equifax Secure Inc. US 04 Mon Jun 21, 1999 to Sun Jun 21, 2020 (GMT) 64:9C:EF:2E:44:FC:C6:8F:52:07:D0:51:73:8F:CB:3D da:40:18:8b:91:89:a3:ed:ee:ae:da:97:fe:2f:9d:f5:b7:d1:8a:41 1024 https://ssltest17.bbtest.net

Root 8 - Equifax Secure Global eBusiness CA-1 Description: This root is no longer used to sign new SSL certificates, but must be included in root stores to be able to validate valid certificates issued off this root. Download - Equifax Secure Global eBusiness CA-1 (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	Equifax Secure Inc. US 01 Mon Jun 21, 1999 to Sun Jun 21, 2020 (GMT) 8F:5D:77:06:27:C4:98:3C:5B:93:78:E7:D7:7D:9B:CC 7e:78:4a:10:1c:82:65:cc:2d:e1:f1:6d:47:b4:40:ca:d9:0a:19:45 1024 ssltest16.bbtest.net

Root 9 - GeoTrust Global CA2 Description: This root is not currently used to sign SSL certificates. This is a 2048 bit Root that should be included in root stores. Download - GeoTrust Global CA2 (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 01 Tue March 04, 2004 to Sun March 04, 2019 (GMT) 0E:40:A7:6C:DE:3:5D:8F:D1:F:E4:D1:8D:F9:6C:A9 a9:e9:78:08:14:37:58:88:f2:05:19:b0:6d:2b:0d:2b:60:16:90:7d 2048 Not Available

Root 10 - GeoTrust Universal CA2 Description: This root is not currently used to sign SSL certificates. This is a 4096 bit Root that should be included in root stores. Download - GeoTrust Universal CA2 (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 01 Tue March 04, 2004 to Sun March 04, 2029 (GMT) 34:FC:B8:D0:36:DB:9E:14:B3:C2:F2:DB:8F:E4:94:C7 37:9a:19:7b:41:85:45:35:0c:a6:03:69:f3:3c:2e:af:47:4f:20:79 4096 Not Available

GeoTrust Application Specific Root Certificates (9-13) Download and install these certificates only for specific applications

Root 11 - GeoTrust CA for Adobe Download - GeoTrust CA for Adobe (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS: Adobe Root CA	GeoTrust Inc. US 3e 1c bd b5 16 Jan 2004 to 15 Jan 2015 dc:9b:f4:ad:a8:2e:c8:d9:97:d0:39:6e:a9:8f:01:84:85:5e:e5:ca 2048 Not Available Download - Adobe Root CA (.pem file) Right Click, Save As

Root 12 - GeoTrust Mobile Device Root - Unprivileged Download - GeoTrust Mobile Device Root - Unprivileged (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 01 29 Jul 2003 to 29 Jul 29 2023 b2:a4:4c:4d:48:fd:95:16:b4:63:90:b9:f6:21:28:9d:a0:f3:a3:65 2048 Not Available

Root 13 - GeoTrust Mobile Device Root - Privileged Download - GeoTrust Mobile Device Root - Privileged (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 01 29 Jul 2003 to 29 Jul 29 2023 53:17:00:a6:14:93:52:ac:4b:ab:b4:e0:be:d8:93:92:6c:55:15:e9 2048 Not Available

Root 14 - GeoTrust CA for UTI Download - GeoTrust CA for UTI (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	Unified Testing Initiative (UTI) US 01 23 Jan 2004 to 23 Jan 2024 88:7a:79:40:6a:2e:61:4f:b6:5f:a6:25:5e:14:11:e4:e1:3a:76:0a 2048 Not Available

Root 15 - GeoTrust True Credentials CA 2 Download - GeoTrust True Credentials CA 2 (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 1b Mon Oct 7, 2002 to Sun Jun 21, 2020 (GMT) 85:8E:B3:54:F7:AC:18:A3:E7:3D:90:9E:02:90:4D:3D e5:f6:2a:23:d1:7d:5b:a1:df:15:ca:98:53:6a:2a:6d:70:cc:93:5f 1024 Not Available

Retired Roots The following roots have been retired and need no longer be distributed by vendors
Root 1 - Equifax Secure eBusiness CA-2 Download - Equifax Secure eBusiness CA-2 (.pem file) Right Click, Save As
Organization: Country: Serial Number: Validity Period: Certificate Fingerprint (MD5): Certificate Fingerprint (SHA-1): Key Length: Digital Verification via HTTPS:	GeoTrust Inc. US 1b Mon Oct 7, 2002 to Sun Jun 21, 2020 (GMT) 85:8E:B3:54:F7:AC:18:A3:E7:3D:90:9E:02:90:4D:3D 39:4f:f6:85:0b:06:be:52:e5:18:56:cc:10:e1:80:e8:82:b3:85:cc 1024 Not Available

Resources

GeoTrust Root Certificates

Root Certificates

Retired Roots