[SSL Observatory] The Trust Tree: An interactive graph of the CA ecosystem
Peter Eckersley
pde at eff.org
Tue Dec 18 16:22:02 PST 2012
On Mon, Dec 17, 2012 at 01:00:24PM -0800, Bernhard Amann wrote:
>
> > @Bernhard: if you want more people to go love this, can you extract (and
> > or show) if any these CAs have restrictions, e.g. DNS path names and/or
> > path lengths?
>
> None of the CAs have DNS path restrictions (if I got my parser code right).
> Path lengths… there is an idea :).
>
> I'll add it to my list. Next version, will take a while.
Here is a slightly old answer to this question from the 2011 centralized
observatory, since I happen to have that handy on this machine. Note that
these may miss some really old root CAs that lack a Basic Constraints:CA
field. Valid certs grouped by CA/not CA:
SELECT `X509v3 extensions:X509v3 Basic Constraints:CA` AS ca, COUNT(*)
FROM valid_certs
GROUP BY ca;
+--------------------------------+----------+
| ca | count(*) |
+--------------------------------+----------+
| NULL | 262612 |
| (critical) FALSE | 830306 |
| (critical) FALSE ANDALSO FALSE | 1 |
| (critical) FALSE, pathlen:0 | 612 |
| (critical) TRUE | 508 |
| (critical) TRUE, pathlen:0 | 360 |
| (critical) TRUE, pathlen:1 | 276 |
| (critical) TRUE, pathlen:11 | 3 |
| (critical) TRUE, pathlen:12 | 1 |
| (critical) TRUE, pathlen:2 | 17 |
| (critical) TRUE, pathlen:3 | 11 |
| (critical) TRUE, pathlen:4 | 4 |
| (critical) TRUE, pathlen:7 | 1 |
| FALSE | 360457 |
| FALSE ANDALSO FALSE | 1 |
| FALSE, pathlen:0 | 139 |
| TRUE | 55 |
| TRUE, pathlen:0 | 14 |
| TRUE, pathlen:1 | 4 |
| TRUE, pathlen:10 | 3 |
| TRUE, pathlen:2 | 2 |
| TRUE, pathlen:3 | 1 |
| TRUE, pathlen:5 | 2 |
| TRUE, pathlen:9 | 1 |
+--------------------------------+----------+
24 rows in set (17.13 sec)
SELECT SUBSTRING(Subject,1,150) AS subj,REPLACE(`X509v3 extensions:X509v3 Basic Constraints:CA`,"(critical) ","") AS ca
FROM valid_certs
WHERE `X509v3 extensions:X509v3 Basic Constraints:CA` REGEXP "TRUE.*pathlen:[0-9]"
ORDER BY ca;
+--------------------------------------------------------------------------------------------------------------------------------------------------------+------------------+
| subj | ca |
+--------------------------------------------------------------------------------------------------------------------------------------------------------+------------------+
| C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority | TRUE, pathlen:0 |
| C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certificates.godaddy.com/repository, CN=Go Daddy Secure Certification Authority/serial | TRUE, pathlen:0 |
| C=US, O=Register.com, CN=Register.com CA SSL Services (DV) | TRUE, pathlen:0 |
| C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository, CN=Starfield Secure Certificatio | TRUE, pathlen:0 |
| C=US, O=Thawte, Inc., OU=Domain Validated SSL, CN=Thawte DV SSL CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO High Assurance Secure Server CA | TRUE, pathlen:0 |
| C=US, O=Secure Business Services, Inc., CN=Secure Business Services CA | TRUE, pathlen:0 |
| C=US, O=Thawte, Inc., CN=Thawte SSL CA | TRUE, pathlen:0 |
| O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)9 | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=EssentialSSL CA | TRUE, pathlen:0 |
| OU=Extended Validation CA, O=GlobalSign, CN=GlobalSign Extended Validation CA | TRUE, pathlen:0 |
| C=BE, OU=Domain Validation CA, O=GlobalSign nv-sa, CN=GlobalSign Domain Validation CA | TRUE, pathlen:0 |
| C=BE, O=Cybertrust, OU=Educational CA, CN=Cybertrust Educational CA | TRUE, pathlen:0 |
| OU=Organization Validation CA, O=GlobalSign, CN=GlobalSign Organization Validation CA | TRUE, pathlen:0 |
| C=BE, OU=Domain Validation CA, O=GlobalSign nv-sa, CN=GlobalSign Domain Validation CA | TRUE, pathlen:0 |
| O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)9 | TRUE, pathlen:0 |
| OU=Alpha CA, O=Alpha, CN=Alpha CA | TRUE, pathlen:0 |
| OU=Organization Validation CA, O=GlobalSign, CN=GlobalSign Organization Validation CA | TRUE, pathlen:0 |
| C=US, O=GeoTrust Inc., OU=Domain Validated SSL, CN=GeoTrust DV SSL CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=EssentialSSL CA | TRUE, pathlen:0 |
| C=US, O=Globe Hosting, Inc., OU=GlobeSSL DV Certification Authority, CN=GlobeSSL CA | TRUE, pathlen:0 |
| OU=Extended Validation CA, O=GlobalSign, CN=GlobalSign Extended Validation CA | TRUE, pathlen:0 |
| C=BE, OU=Domain Validation CA, O=GlobalSign nv-sa, CN=GlobalSign Domain Validation CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Secure Server CA - G2 | TRUE, pathlen:0 |
| C=RO, O=GLOBE HOSTING CERTIFICATION AUTHORITY, CN=GLOBE SSL Domain Validated CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 International Server CA | TRUE, pathlen:0 |
| C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte SGC CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO High-Assurance Secure Server CA | TRUE, pathlen:0 |
| C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, CN=USERTrust Legacy Secure Server CA | TRUE, pathlen:0 |
| C=FR, O=GANDI SAS, CN=Gandi Standard SSL CA | TRUE, pathlen:0 |
| OU=Alpha CA, O=Alpha, CN=Alpha CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Secure Server CA - G2 | TRUE, pathlen:0 |
| OU=Organization Validation CA, O=GlobalSign, CN=GlobalSign Organization Validation CA | TRUE, pathlen:0 |
| C=US, O=GeoTrust, Inc., CN=RapidSSL CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)06, CN=VeriSign Class 3 Extended Validation SSL | TRUE, pathlen:0 |
| C=US, O=GeoTrust Inc, OU=See www.geotrust.com/resources/cps (c)06, CN=GeoTrust Extended Validation SSL CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO EV SGC CA | TRUE, pathlen:0 |
| C=FR, O=KEYNECTIS, CN=CLASS 2 KEYNECTIS CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Extended Validation Secure Server CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)06, CN=VeriSign Class 3 Extended Validation SSL | TRUE, pathlen:0 |
| C=DE, O=WebSpace-Forum, Thomas Wendt, CN=WebSpace-Forum Server CA | TRUE, pathlen:0 |
| C=CH, O=SwissSign AG, CN=SwissSign Server Silver CA 2008 - G2 | TRUE, pathlen:0 |
| OU=Extended Validation CA, O=GlobalSign, CN=GlobalSign Extended Validation CA | TRUE, pathlen:0 |
| C=US, O=thawte, Inc., OU=Terms of use at https://www.thawte.com/cps (c)06, CN=thawte Extended Validation SSL CA | TRUE, pathlen:0 |
| O=CERTINOMIS, CN=AC CERTINOMIS SSL, C=FR | TRUE, pathlen:0 |
| C=BE, OU=Domain Validation CA, O=GlobalSign nv-sa, CN=GlobalSign Domain Validation CA | TRUE, pathlen:0 |
| C=NL, O=TERENA, CN=TERENA SSL CA | TRUE, pathlen:0 |
| C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 2 L1 CA, CN=TC TrustCenter Class 2 L1 CA XI | TRUE, pathlen:0 |
| C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services | TRUE, pathlen:0 |
| C=DE, O=EUNETIC GmbH, CN=EuropeanSSL Server CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)05, CN=VeriSign Class 3 Secure Server CA | TRUE, pathlen:0 |
| DC=com, DC=microsoft, DC=corp, DC=redmond, CN=Microsoft Secure Server Authority | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Secure Server 1024-bit | TRUE, pathlen:0 |
| C=KR, O=eBiz Networks Ltd, CN=eBiz Networks Certificate Services | TRUE, pathlen:0 |
| C=JP, O=Cybertrust Japan Co., Ltd., CN=Cybertrust Japan Public CA G1 | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3 | TRUE, pathlen:0 |
| O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)9 | TRUE, pathlen:0 |
| C=JP, O=Betrusted Japan Co., Ltd., CN=Cybertrust Japan Public CA | TRUE, pathlen:0 |
| C=JP, O=SECOM Trust.net, CN=SECOM Passport for Web CA | TRUE, pathlen:0 |
| C=KR, O=KICA, OU=AccreditedCA, CN=SignGATESSTrust | TRUE, pathlen:0 |
| DC=com, DC=telstra, DC=dir, DC=core, CN=Telstra RSS Issuing CA1 | TRUE, pathlen:0 |
| C=JP, O=SECOM Trust.net, CN=SECOM Passport for Web CA | TRUE, pathlen:0 |
| C=JP, O=SECOM Trust Systems CO.,LTD., CN=SECOM Passport for Web SR 2.0 CA | TRUE, pathlen:0 |
| C=US, O=Google Inc, CN=Google Internet Authority | TRUE, pathlen:0 |
| OU=Alpha CA, O=Alpha, CN=Alpha CA | TRUE, pathlen:0 |
| C=US, O=GeoTrust, Inc., CN=GeoTrust SSL CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)07, CN=VeriSign Class 3 Secure Server 1024-bit | TRUE, pathlen:0 |
| C=KR, O=SGssl, CN=SGTRUST SGC CERTIFICATION AUTHORITY | TRUE, pathlen:0 |
| C=KR, O=SGssl, CN=SGTRUST CERTIFICATION AUTHORITY | TRUE, pathlen:0 |
| C=KR, O=CrossCert, OU=AccreditedCA, CN=CrossCert Server Authority CA | TRUE, pathlen:0 |
| C=JP, O=SECOM Trust Systems CO.,LTD., CN=SECOM Passport for Web EV CA | TRUE, pathlen:0 |
| C=US, O=Trusted Secure Certificate Authority, CN=Trusted Secure Certificate Authority | TRUE, pathlen:0 |
| C=US, O=Trusted Secure Certificate Authority, CN=Trusted Secure Certificate Authority | TRUE, pathlen:0 |
| DC=com, DC=microsoft, DC=corp, DC=redmond, CN=Microsoft Secure Server Authority | TRUE, pathlen:0 |
| C=TW, O=TAIWAN-CA.COM Inc., OU=Certification Service Provider, CN=TaiCA Secure CA | TRUE, pathlen:0 |
| C=US, O=Network Solutions L.L.C., CN=Network Solutions EV SSL CA | TRUE, pathlen:0 |
| C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global CA (2048) | TRUE, pathlen:0 |
| C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=GFS, CN=Microsoft Online Services GFS CA2 | TRUE, pathlen:0 |
| C=JP, O=Cybertrust Japan Co., Ltd., CN=Cybertrust Japan Public CA G2 | TRUE, pathlen:0 |
| C=GB, O=Comodo Limited, OU=Comodo Trust Network, OU=Terms and Conditions of use: http://www.comodo.net/repository, OU=(c)2002 Comodo Limited, CN=Como | TRUE, pathlen:0 |
| C=JP, L=Academe2, O=National Institute of Informatics, OU=UPKI, OU=NII Open Domain CA - G2 | TRUE, pathlen:0 |
| C=DE, O=adidas AG, CN=adidas EMEA Issuing CA 01 | TRUE, pathlen:0 |
| C=US, O=WoSign, Inc., CN=WoSign Premium Server Authority | TRUE, pathlen:0 |
| C=HK, O=Hongkong Post, CN=Hongkong Post e-Cert CA 1 - 10 | TRUE, pathlen:0 |
| C=US, O=WoSign, Inc., CN=WoSign SGC Server Authority | TRUE, pathlen:0 |
| C=KR, O=CrossCert, OU=AccreditedCA, CN=CrossCert Class 1 Server CA | TRUE, pathlen:0 |
| C=kr, O=yessign, OU=AccreditedCA, CN=yessignCA General Class 2 | TRUE, pathlen:0 |
| C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global CA | TRUE, pathlen:0 |
| C=US, O=WoSign, Inc., CN=WoSign Server Authority | TRUE, pathlen:0 |
| C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte SGC CA | TRUE, pathlen:0 |
| C=MY, O=Digicert Sdn. Bhd., OU=457608-K, CN=Digisign Server ID - (Enrich) | TRUE, pathlen:0 |
| C=JP, O=Cybertrust Japan Co., Ltd., CN=Cybertrust Japan EV CA G2 | TRUE, pathlen:0 |
| C=JP, O=CrossTrust, CN=CrossTrust OV CA1 | TRUE, pathlen:0 |
| C=US, O=Thawte, Inc., CN=Thawte SGC CA - G2 | TRUE, pathlen:0 |
| C=TW, O=TAIWAN-CA.COM Inc., OU=SSL Certification Service Provider, CN=TaiCA Secure CA | TRUE, pathlen:0 |
| C=KR, O=SignKorea, OU=AccreditedCA, CN=SignKorea mCA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)06, CN=VeriSign Class 3 Extended Validation SSL | TRUE, pathlen:0 |
| C=KR, O=eBiz Networks Ltd, CN=eBiz Networks Certificate Services | TRUE, pathlen:0 |
| C=KR, O=SignKorea, OU=AccreditedCA, CN=SignKorea mCA | TRUE, pathlen:0 |
| C=US, O=Thawte, Inc., OU=Domain Validated SSL, CN=Thawte DV SSL CA | TRUE, pathlen:0 |
| C=KR, O=Government of Korea, OU=GPKI, CN=CA131000001 | TRUE, pathlen:0 |
| C=KR, O=Government of Korea, OU=GPKI, CN=CA131000001 | TRUE, pathlen:0 |
| C=US, O=Thawte, Inc., CN=Thawte SSL CA | TRUE, pathlen:0 |
| C=US, O=Trusted Secure Certificate Authority, CN=Trusted Secure Certificate Authority | TRUE, pathlen:0 |
| O=Bayer Group, OU=Bayer Business Services, CN=Bayer Group External Server CA | TRUE, pathlen:0 |
| C=US, O=Wotone Communications, Inc., CN=WoTrust Server Authority | TRUE, pathlen:0 |
| C=JP, O=SECOM Trust.net, CN=SECOM Passport for Web SR CA | TRUE, pathlen:0 |
| C=JP, O=Comodo Japan Inc., CN=Comodo Japan CA | TRUE, pathlen:0 |
| C=AU, O=AusCERT, OU=Certificate Services, CN=AusCERT Server CA | TRUE, pathlen:0 |
| C=MY, O=Digicert Sdn. Bhd., OU=457608-K, CN=Digisign Server ID (Enrich) | TRUE, pathlen:0 |
| C=kr, O=yessign, OU=AccreditedCA, CN=yessignCA General Class 1 | TRUE, pathlen:0 |
| C=JP, O=CENTRAL SECURITY PATROLS CO., LTD., CN=CSP SSL Service CA | TRUE, pathlen:0 |
| C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte SGC CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)07, CN=VeriSign Class 3 Extended Validation 102 | TRUE, pathlen:0 |
| C=TW, O=\xE8\xA1\x8C\xE6\x94\xBF\xE9\x99\xA2, OU=\xE6\x94\xBF\xE5\xBA\x9C\xE6\x86\x91\xE8\xAD\x89\xE7\xAE\xA1\xE7\x90\x86\xE4\xB8\xAD\xE5\xBF\x83 | TRUE, pathlen:0 |
| C=HK, O=Hongkong Post, CN=Hongkong Post e-Cert CA 1 | TRUE, pathlen:0 |
| C=US, O=Akamai Technologies Inc, CN=Akamai Subordinate CA 3 | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Extended Validation Secure Server CA 2 | TRUE, pathlen:0 |
| C=JP, O=INTEC INC., CN=EINS/PKI Public Certification Authority | TRUE, pathlen:0 |
| emailAddress=pki-security-ext at nestle.com, C=CH, ST=Vaud, L=Vevey, O=Nestle, OU=IS/IT, CN=Nestle External CA | TRUE, pathlen:0 |
| O=Cybertrust Inc, CN=Cybertrust SureServer EV CA | TRUE, pathlen:0 |
| O=Cisco Systems, CN=Cisco SSCA | TRUE, pathlen:0 |
| C=JP, O=Cybertrust Japan Co., Ltd., CN=Cybertrust Japan EV CA G1 | TRUE, pathlen:0 |
| C=TW, O=TAIWAN-CA INC., OU=SSL Certification Service Provider, CN=TWCA Secure CA | TRUE, pathlen:0 |
| C=TW, O=TAIWAN-CA.COM Inc., OU=Certification Service Provider-Evaluation Only, CN=TaiCA Secure CA -Evaluation Only | TRUE, pathlen:0 |
| C=KR, O=TradeSign, OU=AccreditedCA, CN=TradeSignCA | TRUE, pathlen:0 |
| C=US, ST=California, L=San Jose, O=Cadence Design Systems, OU=Information Security Services, CN=Cadence Secure Server Authority/emailAddress=security | TRUE, pathlen:0 |
| C=US, O=Bechtel Corporation, OU=Information Security, CN=Bechtel External iBechtel CA 1 | TRUE, pathlen:0 |
| OU=Extended Validation CA, O=GlobalSign, CN=GlobalSign Extended Validation CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)03, CN=VeriSign Class 3 Secure Intranet Server | TRUE, pathlen:0 |
| C=JP, L=Academe, O=National Institute of Informatics, OU=UPKI, OU=NII Open Domain CA | TRUE, pathlen:0 |
| C=US, O=RegisterFly.com, inc., CN=ResellerFly Certificate Services | TRUE, pathlen:0 |
| C=US, O=Register.com, CN=Register.com CA SSL Services (OV) | TRUE, pathlen:0 |
| C=CN, O=CNNIC SSL, CN=CNNIC SSL | TRUE, pathlen:0 |
| C=FR, ST=Calvados, L=Caen, O=TBS INTERNET, OU=Terms and Conditions: http://www.tbs-internet.com/CA/repository, OU=TBS INTERNET CA, CN=TBS X509 CA SGC | TRUE, pathlen:0 |
| C=JP, O=CENTRAL SECURITY PATROLS CO., LTD., CN=CSP SSL Service CA | TRUE, pathlen:0 |
| C=US, ST=Texas, L=San Antonio, OU=GS CA, O=XRamp Security Services Inc, CN=XRamp Security Services GS CA | TRUE, pathlen:0 |
| C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter SSL CA, CN=TC TrustCenter SSL CA I | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO EV SSL CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO EV SSL CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO EV SSL CA | TRUE, pathlen:0 |
| O=Dell Inc., CN=Dell Inc. Enterprise Issuing CA1 | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA | TRUE, pathlen:0 |
| C=DE, O=Fraunhofer, OU=Fraunhofer Corporate PKI, CN=Fraunhofer Service CA 2007 | TRUE, pathlen:0 |
| C=US, O=Cybertrust Inc, OU=Services, OU=PKI, CN=Cybertrust Public Issuing CA 1 | TRUE, pathlen:0 |
| C=US, O=DigiCert Inc., CN=DigiCert Security Services CA | TRUE, pathlen:0 |
| C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Secure OFX CA - G3 | TRUE, pathlen:0 |
| C=BE, O=GlobalSign nv-sa, OU=ServerSign CA, CN=GlobalSign ServerSign CA | TRUE, pathlen:0 |
| O=Dell Inc., CN=Dell Inc. Enterprise Issuing CA1 | TRUE, pathlen:0 |
| DC=COM, DC=ABB, O=ABB Ltd., CN=ABB Issuing CA 1 | TRUE, pathlen:0 |
| C=DE, O=Fraunhofer, OU=Fraunhofer Corporate PKI, CN=Fraunhofer User CA 2007 | TRUE, pathlen:0 |
| C=FR, ST=Calvados, L=Caen, O=TBS INTERNET, OU=Terms and Conditions: http://www.tbs-internet.com/CA/repository, OU=TBS INTERNET CA, CN=TBS X509 CA bus | TRUE, pathlen:0 |
| C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte SSL Domain CA | TRUE, pathlen:0 |
| C=US, OU=American Express Technologies, ST=NY, CN=American Express Channel Server CA 3 | TRUE, pathlen:0 |
| C=US, O=Wells Fargo, OU=Wells Fargo Certification Authority, CN=Wells Fargo Certificate Authority 01 | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO EV SGC CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO EV SGC CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)05, OU=Persona Not Validated, CN=VeriSign Class | TRUE, pathlen:0 |
| C=US, O=Anthem Inc, OU=Ecommerce, CN=Anthem Inc Certificate Authority | TRUE, pathlen:0 |
| C=US, O=Secure Business Services, Inc., CN=Secure Business Services CA | TRUE, pathlen:0 |
| C=RO, O=GLOBE HOSTING CERTIFICATION AUTHORITY, CN=GLOBE SSL CA | TRUE, pathlen:0 |
| C=US, O=Aetna Inc., CN=Aetna Inc. Secure Server CA | TRUE, pathlen:0 |
| C=US, O=SAIC, OU=PKI, CN=SAIC Public Issuing CA 01 | TRUE, pathlen:0 |
| C=DE, O=Siemens/serialNumber=ZZZZZZVI, OU=Copyright (C) Siemens AG 2009 All Rights Reserved, CN=Siemens Issuing CA Class Internet Server V1.0 | TRUE, pathlen:0 |
| C=US, O=Trusted Secure Certificate Authority, CN=Trusted Secure Certificate Authority | TRUE, pathlen:0 |
| O=Munich Re Group, CN=MRG Issuing CA 01 | TRUE, pathlen:0 |
| O=Munich Re Group, CN=MRG Issuing CA 01 | TRUE, pathlen:0 |
| DC=edu, DC=lsu, CN=Louisiana State University Issuing CA 1 | TRUE, pathlen:0 |
| C=BE, O=Cybertrust, OU=Educational CA, CN=Cybertrust Educational CA | TRUE, pathlen:0 |
| C=IT, O=Actalis S.p.A., OU=Certification Service Provider, CN=Actalis Server Authentication CA | TRUE, pathlen:0 |
| C=NL, O=TERENA, CN=TERENA Personal CA | TRUE, pathlen:0 |
| C=FR, OU=High Assurance, O=OVH SAS, CN=OVH Secure Certification Authority | TRUE, pathlen:0 |
| CN=Microsoft Secure Server Authority | TRUE, pathlen:0 |
| CN=Microsoft Secure Server Authority | TRUE, pathlen:0 |
| C=FI, ST=Finland, O=Vaestorekisterikeskus CA, OU=Palveluvarmenteet, CN=VRK CA for Service Providers | TRUE, pathlen:0 |
| C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Product Secure Server CA/emailAddress=pki at microsoft.com | TRUE, pathlen:0 |
| DC=com, DC=guidant, DC=ad, CN=GDT-EntSubCA-Public | TRUE, pathlen:0 |
| C=JP, O=Fuji Xerox, CN=Fuji Xerox Product CA | TRUE, pathlen:0 |
| C=AU, O=AusCERT, OU=Certificate Services, CN=AusCERT SGC Server CA | TRUE, pathlen:0 |
| C=FR, O=KEYNECTIS, CN=CLASS 2 KEYNECTIS CA | TRUE, pathlen:0 |
| C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Rubin CA 1 | TRUE, pathlen:0 |
| C=CH, O=SwissSign AG, CN=SwissSign Server Gold CA 2008 - G2 | TRUE, pathlen:0 |
| C=US, O=SAIC, OU=PKI, CN=SAIC Public Issuing CA 01 | TRUE, pathlen:0 |
| C=US, O=SAIC, OU=PKI, CN=SAIC Public Issuing CA 01 | TRUE, pathlen:0 |
| C=UK, O=Vodafone Group, CN=Vodafone (Corporate Services 2009) | TRUE, pathlen:0 |
| C=UK, O=Vodafone Group, CN=Vodafone (Secure Sites) | TRUE, pathlen:0 |
| C=TW, O=TAIWAN-CA INC., OU=SSL Certification Service Provider, CN=TWCA Secure CA | TRUE, pathlen:0 |
| C=TW, O=TAIWAN-CA.COM Inc., OU=SSL Certification Service Provider-Evaluation Only, CN=TaiCA Secure CA -Evaluation Only | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3 | TRUE, pathlen:0 |
| C=LU, O=LuxTrust S.A., CN=LuxTrust Qualified CA | TRUE, pathlen:0 |
| C=NL, O=DigiNotar, CN=DigiNotar Services 1024 CA/emailAddress=info at diginotar.nl | TRUE, pathlen:0 |
| O=Dell Inc., OU=Information Technology, CN=Dell Inc. Enterprise Issuing CA3 | TRUE, pathlen:0 |
| C=NL, O=DigiNotar, CN=DigiNotar Extended Validation CA/emailAddress=info at diginotar.nl | TRUE, pathlen:0 |
| O=Dell Inc., CN=Dell Inc. Enterprise Utility CA1 | TRUE, pathlen:0 |
| O=Dell Inc., CN=Dell Inc. Enterprise Utility CA1 | TRUE, pathlen:0 |
| DC=com, DC=telstra, DC=dir, DC=test, DC=testcore, CN=Test RSS Issuing CA | TRUE, pathlen:0 |
| C=US, O=Entrust, OU=Certification Authorities, CN=Entrust Education Shared Service Provider | TRUE, pathlen:0 |
| C=DE, O=T-Systems International GmbH, OU=Trust Center Services, CN=TeleSec ServerPass CA 1 | TRUE, pathlen:0 |
| C=US, O=Bechtel Corporation, OU=Information Security, CN=Bechtel Corporation External CA | TRUE, pathlen:0 |
| C=IT, O=Postecom S.p.A., OU=Servizi Certification Authority, CN=Postecom CS2 | TRUE, pathlen:0 |
| O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)01, CN=Class 3 Open Financial Exchange CA - G2 | TRUE, pathlen:0 |
| DC=edu, DC=sacredheart, CN=Sacred Heart University CA | TRUE, pathlen:0 |
| CN=ACCV-CA2, OU=PKIGVA, O=Generalitat Valenciana, C=ES | TRUE, pathlen:0 |
| C=NL, O=TERENA, CN=TERENA eScience SSL CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - T1 | TRUE, pathlen:0 |
| C=IT, O=InfoCert SpA, OU=Internet Services, CN=InfoCert Certification Authority | TRUE, pathlen:0 |
| C=BE, CN=Government CA/serialNumber=2010 | TRUE, pathlen:0 |
| C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 4 L1 CA, CN=TC TrustCenter Class 4 Extended Validation CA II | TRUE, pathlen:0 |
| O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)01, CN=Class 3 Open Financial Exchange CA - G2 | TRUE, pathlen:0 |
| C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=DNIE, CN=AC DNIE 003 | TRUE, pathlen:0 |
| C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=DNIE, CN=AC DNIE 002 | TRUE, pathlen:0 |
| C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=DNIE, CN=AC DNIE 001 | TRUE, pathlen:0 |
| C=IS, O=Audkenni hf., OU=Secure Server CA, CN=Audkenni Secure Server CA | TRUE, pathlen:0 |
| C=BE, CN=Government CA/serialNumber=2007 | TRUE, pathlen:0 |
| C=BE, O=GlobalSign nv-sa, OU=Enhanced ServerSign CA, CN=GlobalSign Enhanced ServerSign CA | TRUE, pathlen:0 |
| O=Ministere de la Justice, CN=Autorite de Certification Serveurs | TRUE, pathlen:0 |
| C=LU, O=LuxTrust s.a, CN=LuxTrust Normalised CA | TRUE, pathlen:0 |
| C=LU, O=LuxTrust s.a, CN=LuxTrust Normalised CA | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Servico Federal de Processamento de Dados - SERPRO, OU=CSPB-1, CN=Autoridade Certificadora do SERPRO Final v2 | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Secretaria da Receita Federal do Brasil - RFB, CN=Autoridade Certificadora do SERPRORFB | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Servico Federal de Processamento de Dados - SERPRO, OU=CSPB-1, CN=Autoridade Certificadora do SERPRO Final v1 | TRUE, pathlen:0 |
| O=Wachovia Corporation, CN=Secure Server Certificate Authority v1 | TRUE, pathlen:0 |
| C=CH, O=admin, OU=Services, OU=Certification Authorities, CN=AdminCA-CD-T01 | TRUE, pathlen:0 |
| C=CH, O=admin, OU=Services, OU=Certification Authorities, CN=AdminCA-CD-T01 | TRUE, pathlen:0 |
| C=CH, O=RUAG Holding Ltd, CN=RUAG CA 21 | TRUE, pathlen:0 |
| C=US, O=Thawte, Inc., CN=Thawte SSL CA | TRUE, pathlen:0 |
| C=JP, O=Fuji Xerox, CN=Fuji Xerox SDES CA | TRUE, pathlen:0 |
| C=TW, O=\xE8\xA1\x8C\xE6\x94\xBF\xE9\x99\xA2, OU=\xE6\x94\xBF\xE5\xBA\x9C\xE6\xB8\xAC\xE8\xA9\xA6\xE6\x86\x91\xE8\xAD\x89\xE7\xAE\xA1\xE7\x90\x86\xE4 | TRUE, pathlen:0 |
| C=UY, O=ADMINISTRACION NACIONAL DE CORREOS, OU=SERVICIOS ELECTRONICOS, CN=Correo Uruguayo - CA | TRUE, pathlen:0 |
| C=CH, O=SwissSign AG, CN=SwissSign EV Gold CA 2009 - G2 | TRUE, pathlen:0 |
| O=CDC, OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)00, OU=Class 2 OnSite Individual Subscriber CA, CN=CDC Secure Da | TRUE, pathlen:0 |
| C=TW, O=Chunghwa Telecom Co., Ltd., OU=Public Certification Authority | TRUE, pathlen:0 |
| C=IL, O=StartCom Ltd., OU=StartCom Certification Authority, CN=StartCom Extended Validation Server CA | TRUE, pathlen:0 |
| C=FR, ST=Calvados, L=Caen, O=TBS INTERNET, OU=Terms and Conditions: http://www.tbs-internet.com/CA/repository, OU=TBS INTERNET CA, CN=TBS X509 CA pro | TRUE, pathlen:0 |
| C=FR, O=GANDI SAS, CN=Gandi Pro SSL CA | TRUE, pathlen:0 |
| C=RO, O=GLOBE HOSTING CERTIFICATION AUTHORITY, CN=GLOBE SGC SSL CA | TRUE, pathlen:0 |
| C=FR, O=GANDI SAS, CN=Gandi SGC SSL CA | TRUE, pathlen:0 |
| C=US, O=Globe Hosting, Inc., OU=GlobeSSL OV Certification Authority, CN=GlobeSSL CA | TRUE, pathlen:0 |
| C=FR, OU=Low Assurance, O=OVH SAS, CN=OVH Secure Certification Authority | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Autoridade Certificadora da Justica - AC-JUS, CN=AC CAIXA-JUS | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Certisign Certificadora Digital S.A., CN=AC Certisign Multipla G3 | TRUE, pathlen:0 |
| C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Secondary Normalised CA for SSL and Code | TRUE, pathlen:0 |
| C=ES/emailAddress=ca1 at firmaprofesional.com, L=C/ Muntaner 244 Barcelona, OU=Consulte http://www.firmaprofesional.com, OU=Jerarquia de Certificacion F | TRUE, pathlen:0 |
| C=US, O=Globe Hosting, Inc., OU=Controlled by COMODO exclusively for Globe Hosting, Inc., OU=GlobeSSL EV Certification Authority, CN=GlobeSSL CA | TRUE, pathlen:0 |
| C=RU, O=RBC Hosting Center, CN=RBC HC High Assurance Services CA | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Companhia de Tecnologia da Informacao do Estado de MG - PRODEMGE, CN=AC PRODEMGE G2 | TRUE, pathlen:0 |
| C=CO, O=Sociedad Cameral de Certificaci\xC3\xB3n Digital - Certic\xC3\xA1mara S.A., CN=AC Subordinada Certic\xC3\xA1mara S.A. | TRUE, pathlen:0 |
| C=CO, O=Sociedad Cameral de Certificaci\xC3\xB3n Digital - Certic\xC3\xA1mara S.A., CN=AC Subordinada Certic\xC3\xA1mara S.A. | TRUE, pathlen:0 |
| C=CH, O=WISeKey, OU=Copyright (c) 2006 WISeKey SA, OU=International, CN=WISeKey CertifyID Advanced Services CA 1 | TRUE, pathlen:0 |
| C=US, O=Thawte, Inc., CN=Thawte SGC CA - G2 | TRUE, pathlen:0 |
| C=JP, O=Fuji Xerox, CN=Fuji Xerox Xnet CA | TRUE, pathlen:0 |
| C=US, ST=California, L=San Jose, O=Cadence Design Systems, OU=Information Security Services, CN=Cadence Secure Server Authority/emailAddress=security | TRUE, pathlen:0 |
| C=US, O=Registry Pro, CN=Registry Pro CA | TRUE, pathlen:0 |
| C=IL, O=StartCom Ltd., OU=StartCom Certification Authority, CN=StartCom Extended Validation Server CA | TRUE, pathlen:0 |
| C=ES, O=FNMT-RCM, OU=AC APE | TRUE, pathlen:0 |
| C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 3 L1 CA, CN=TC TrustCenter Class 3 L1 CA IX | TRUE, pathlen:0 |
| DC=CH, DC=Coop, O=Coop, CN=Coop System CA 1 | TRUE, pathlen:0 |
| DC=com, DC=sanpaoloimi, DC=corp, DC=sede, CN=Intesa Sanpaolo S.p.A. CA Servizi Esterni | TRUE, pathlen:0 |
| C=IT, O=UGIS S.p.A., OU=ICT Security Office, OU=Servizi di Certificazione | TRUE, pathlen:0 |
| emailAddress=pki at sk.ee, C=EE, O=AS Sertifitseerimiskeskus, OU=Sertifitseerimisteenused/serialNumber=1, CN=KLASS3-SK | TRUE, pathlen:0 |
| C=CH, DC=ch, DC=tcsgroup, ST=Geneva, L=Vernier, O=Touring Club Suisse (TCS), CN=Touring Club Suisse CA | TRUE, pathlen:0 |
| C=AE, O=Etisalat, OU=Etisalat eBusiness Services, CN=Comtrust Server Certification Authority | TRUE, pathlen:0 |
| C=BE, O=KBC Group, CN=KBC Group Server CA | TRUE, pathlen:0 |
| C=FI, ST=Finland, O=Vaestorekisterikeskus CA, OU=Valtion kansalaisvarmenteet, CN=VRK Gov. CA for Citizen Qualified Certificates | TRUE, pathlen:0 |
| C=ES, ST=Madrid, L=Paseo del General Martinez Campos 46-6a planta, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Ce | TRUE, pathlen:0 |
| C=BE, CN=Government CA | TRUE, pathlen:0 |
| C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Secondary Normalised CA for SSL and Code | TRUE, pathlen:0 |
| C=PL, O=E-Telbank Sp. z o.o., OU=PolCert Secure Server CA, CN=PolCert Secure Server CA | TRUE, pathlen:0 |
| C=ES, O=Generalitat Valenciana, OU=PKIGVA, CN=CAGVA | TRUE, pathlen:0 |
| C=FR, O=MINEFI, OU=TELEPROCEDURES, CN=MINEFI-AC TELEPROCEDURES | TRUE, pathlen:0 |
| C=DE, O=EUNETIC GmbH, CN=EuropeanSSL High Assurance Server CA | TRUE, pathlen:0 |
| C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Diamant CA 1 | TRUE, pathlen:0 |
| C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Saphir CA 1 | TRUE, pathlen:0 |
| C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Smaragd CA 1 | TRUE, pathlen:0 |
| emailAddress=noc at swissdigicert.ch, C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Test-D CA 1 | TRUE, pathlen:0 |
| C=CH, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom TSA CA 1 | TRUE, pathlen:0 |
| C=HU, L=Debrecen, O=NetLock Kft., OU=Tan\xC3\xBAs\xC3\xADtv\xC3\xA1nykiad\xC3\xB3k (Certification Services), CN=Online SSL Hiteles\xC3\xADt\xC5\x91 A | TRUE, pathlen:0 |
| C=UK, O=Vodafone Group, CN=Vodafone (Secure Sites) | TRUE, pathlen:0 |
| C=CZ, O=\xC4\x8Cesk\xC3\xA1 po\xC5\xA1ta, s.p. [I\xC4\x8C 47114983], CN=PostSignum Public CA 2 | TRUE, pathlen:0 |
| C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 4 L1 CA, CN=TC TrustCenter Class 4 Extended Validation CA I | TRUE, pathlen:0 |
| C=BE, CN=Government CA/serialNumber=2006 | TRUE, pathlen:0 |
| C=DE, O=T-Systems Enterprise Services GmbH, OU=Trust Center Deutsche Telekom, CN=NetPass CA 3 | TRUE, pathlen:0 |
| C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Secondary Normalised CA for Web Servers and Object Signing | TRUE, pathlen:0 |
| C=IT, L=Milano, O=Actalis S.p.A./03358520967, CN=Actalis Authentication CA G1 | TRUE, pathlen:0 |
| C=DE, O=WebSpace-Forum e.K., CN=WebSpace-Forum SGC CA | TRUE, pathlen:0 |
| C=PT, O=MarketWare, OU=Certificate Services, CN=MarketWare Server CA | TRUE, pathlen:0 |
| C=CH, O=SwissSign AG, CN=SwissSign Server Silver CA - G2 | TRUE, pathlen:0 |
| OU=Organization Validation CA, O=GlobalSign, CN=GlobalSign Organization Validation CA | TRUE, pathlen:0 |
| C=EE, O=AS Sertifitseerimiskeskus, OU=ESTEID, CN=ESTEID-SK 2007 | TRUE, pathlen:0 |
| C=CH, O=SwissSign AG, CN=SwissSign EV Gold CA 2008 - G2 | TRUE, pathlen:0 |
| C=BE, OU=Domain Validation CA, O=GlobalSign nv-sa, CN=GlobalSign Domain Validation CA | TRUE, pathlen:0 |
| C=EE, O=AS Sertifitseerimiskeskus, OU=Sertifitseerimisteenused, CN=KLASS3-SK 2010 | TRUE, pathlen:0 |
| C=DE, O=WebSpace-Forum e.K., CN=WebSpace-Forum Essential CA | TRUE, pathlen:0 |
| C=UK, O=Vodafone Group, CN=Vodafone (Secure Networks) | TRUE, pathlen:0 |
| C=UK, O=Vodafone Group, CN=Vodafone (Secure Networks) | TRUE, pathlen:0 |
| C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Code Signing CA | TRUE, pathlen:0 |
| C=ZA, O=Thawte Consulting (Pty) Ltd., CN=Thawte Personal Freemail Issuing CA | TRUE, pathlen:0 |
| C=FR, O=Certplus, OU=Entity of KEYNECTIS for CA services, CN=KEYNECTIS Extended Validation CA | TRUE, pathlen:0 |
| C=MK, O=KIBS AD Skopje, OU=Verba CA, CN=KIBS Verba Server CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 International Server CA | TRUE, pathlen:0 |
| CN=Marks and Spencer Group plc External sub CA1, OU=Marks and Spencer Group plc OmniRoot sub CA, O=Marks and Spencer Group plc, C=GB | TRUE, pathlen:0 |
| O=Mortgage and Settlement Service Trust CA | TRUE, pathlen:0 |
| DC=com, DC=ch2m, CN=CH2M HILL Internet CA | TRUE, pathlen:0 |
| O=Earthlink Inc, CN=Earthlink Application CA/emailAddress=pki_admin at corp.earthlink.net | TRUE, pathlen:0 |
| C=US, O=VISA, OU=Visa International Service Association, CN=VI CA2 | TRUE, pathlen:0 |
| C=CA, O=Syncrude Canada Ltd, CN=Syncrude Corporate Issuing CA 5 | TRUE, pathlen:0 |
| C=US, O=VISA, OU=Visa International Service Association, CN=VI CA1 | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Autoridade Certificadora da Justica - AC-JUS, CN=AC SERPRO-JUS v3 | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Companhia de Tecnologia da Informacao do Estado de MG - PRODEMGE, CN=AC PRODEMGE | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Certisign Certificadora Digital S.A., CN=AC CertiSign Multipla V3 | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Secretaria da Receita Federal do Brasil - RFB, CN=AC BR RFB G2 | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Autoridade Certificadora da Justica - AC-JUS, CN=Autoridade Certificadora SERPRO-JUS | TRUE, pathlen:0 |
| O=E-Sign S.A., OU=VeriSign Trust Network, OU=Terms of use at https://www.e-sign.cl/rpa (c)05, CN=E-Sign SC Class 2 Consumer Individual Subscriber CA/ | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Secretaria da Receita Federal do Brasil - RFB, CN=AC Imprensa Oficial SP RFB G2 | TRUE, pathlen:0 |
| C=BR, O=ICP-Brasil, OU=Secretaria da Receita Federal do Brasil - RFB, CN=AC Notarial RFB G2 | TRUE, pathlen:0 |
| C=JP, O=Cybertrust Japan Co., Ltd., CN=Cybertrust Japan EV CA G1 | TRUE, pathlen:0 |
| C=TW, O=\xE8\xA1\x8C\xE6\x94\xBF\xE9\x99\xA2, OU=\xE9\x86\xAB\xE4\xBA\x8B\xE6\x86\x91\xE8\xAD\x89\xE7\xAE\xA1\xE7\x90\x86\xE4\xB8\xAD\xE5\xBF\x83 | TRUE, pathlen:0 |
| C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2 | TRUE, pathlen:0 |
| C=US, O=Secure Business Services, Inc., CN=Secure Business Services CA | TRUE, pathlen:0 |
| C=US, O=Network Solutions L.L.C., CN=Network Solutions EV Server CA | TRUE, pathlen:0 |
| C=US, O=Aetna Inc., OU=GeoRoot Certification Authority, CN=Aetna Inc. Certificate Authority | TRUE, pathlen:0 |
| DC=Net, DC=One, DC=Nalco, CN=NalcoExternalIssuingCA-1 | TRUE, pathlen:0 |
| DC=edu, DC=liberty, CN=LUPKI01 | TRUE, pathlen:0 |
| C=US, O=Network Solutions L.L.C., CN=Network Solutions EV SSL CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3 | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Organizational CA | TRUE, pathlen:0 |
| OU=Extended Validation CA, O=GlobalSign, CN=GlobalSign Extended Validation CA | TRUE, pathlen:0 |
| C=US, O=Wotone Communications, Inc., CN=WoTrust Premium Server Authority | TRUE, pathlen:0 |
| OU=Extended Validation SHA256 CA, O=GlobalSign, CN=GlobalSign Extended Validation SHA256 CA | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)07, CN=VeriSign Class 3 Extended Validation 102 | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)07, CN=VeriSign Class 3 Extended Validation 102 | TRUE, pathlen:0 |
| C=CH, O=SwissSign AG, CN=Swiss Post Platinum CA - G2 | TRUE, pathlen:0 |
| C=DE, O=TC TrustCenter GmbH, OU=TC TrustCenter Class 3 L1 CA, CN=TC TrustCenter Class 3 L1 CA IX | TRUE, pathlen:0 |
| C=NL, O=DigiNotar, CN=DigiNotar Services CA/emailAddress=info at diginotar.nl | TRUE, pathlen:0 |
| C=IL, O=StartCom Ltd., OU=StartCom Certification Authority, CN=StartCom Extended Validation Server CA | TRUE, pathlen:0 |
| C=NL, O=DigiNotar, CN=DigiNotar Public CA 2025/emailAddress=info at diginotar.nl | TRUE, pathlen:0 |
| C=AT, L=Wien, O=MP2 IT-Solutions GmbH, CN=MP2.at Root CA/emailAddress=mp2 at mp2.at | TRUE, pathlen:0 |
| C=ES/emailAddress=ca1 at firmaprofesional.com, L=C/ Muntaner 244 Barcelona, OU=Consulte http://www.firmaprofesional.com, OU=Jerarquia de Certificacion F | TRUE, pathlen:0 |
| C=ES, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), L=Passatge de la Concepcio 11 08008 Barcelona, OU=Serveis Publics de Certificacio ECV-2, | TRUE, pathlen:0 |
| C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Extended Validation CA | TRUE, pathlen:0 |
| C=DE, O=D-Trust GmbH, CN=D-TRUST Advanced Class 2 CA 2007 | TRUE, pathlen:0 |
| DC=INT, DC=ICC, O=ICC-CPI, CN=ICC-CPI Advanced G3 CA1 | TRUE, pathlen:0 |
| C=AE, O=Etisalat, OU=Etisalat eBusiness Services, CN=Comtrust User Certification Authority | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA | TRUE, pathlen:0 |
| C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=DNIE, CN=AC DNIE 001 | TRUE, pathlen:0 |
| C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=DNIE, CN=AC DNIE 002 | TRUE, pathlen:0 |
| C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=DNIE, CN=AC DNIE 003 | TRUE, pathlen:0 |
| C=IT, O=Centro Nazionale per l'Informatica nella PA, OU=Servizi di Sicurezza e Certificazione, CN=CNIPA CA2 | TRUE, pathlen:0 |
| C=FR, O=Certplus, OU=Entity of KEYNECTIS for CA services, CN=KEYNECTIS Extended Validation CA | TRUE, pathlen:0 |
| C=FR, O=CEDICAM, OU=0002 723001467, CN=AC CertiPart | TRUE, pathlen:0 |
| C=IT, O=Intesa Sanpaolo S.p.A., CN=Intesa Sanpaolo S.p.A. - Certification Authority Infrastrutture | TRUE, pathlen:0 |
| C=KR, O=eBiz Networks Ltd, CN=eBiz Networks Certificate Services | TRUE, pathlen:0 |
| C=kr, O=yessign, OU=LicensedCA, CN=yessignCA-SSL | TRUE, pathlen:0 |
| C=TW, O=TAIWAN-CA.COM Inc., OU=SSL Certification Service Provider-Evaluation Only, CN=TaiCA Secure CA -Evaluation Only | TRUE, pathlen:0 |
| C=TW, O=TAIWAN-CA INC., OU=SSL Certification Service Provider-Evaluation Only, CN=TWCA Secure CA -Evaluation Only | TRUE, pathlen:0 |
| C=JP, O=SECOM Trust.net, OU=SubordinateCA1 | TRUE, pathlen:0 |
| C=JP, O=SECOM Trust Systems CO.,LTD., CN=SubordinateCA6 | TRUE, pathlen:0 |
| C=NL, O=DigiNotar, CN=DigiNotar Qualified CA/emailAddress=info at diginotar.nl | TRUE, pathlen:0 |
| C=NL, O=Nederlandse Orde van Advocaten, CN=Nederlandse Orde van Advocaten - Dutch Bar Association | TRUE, pathlen:0 |
| C=CY, O=IceWarp Limited, CN=icewarp.com (IceWarp Domain Validation Certification Authority) | TRUE, pathlen:0 |
| C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=GFS, CN=Microsoft Online Services GFS CA1 | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)05, OU=Persona Not Validated, CN=VeriSign Class | TRUE, pathlen:0 |
| C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA | TRUE, pathlen:0 |
| C=CH, O=WISeKey, OU=Copyright (c) 2006 WISeKey SA, OU=International, CN=WISeKey CertifyID Standard Services CA 1 | TRUE, pathlen:0 |
| C=CH, O=SwissSign AG, CN=SwissSign Server Gold CA - G2 | TRUE, pathlen:0 |
| C=AT, L=Wien, O=Energie-Control GmbH, CN=E-Control Certification Services/emailAddress=cert.services at e-control.at | TRUE, pathlen:0 |
| C=IT, O=Centro Nazionale per l'Informatica nella PA, OU=Servizi di Sicurezza e Certificazione, CN=CNIPA CA3 | TRUE, pathlen:0 |
| C=PL, O=E-Telbank Sp. z o.o., OU=PolCert Class 1 CA, CN=PolCert Class 1 CA | TRUE, pathlen:0 |
| C=PL, O=E-Telbank Sp. z o.o., OU=PolCert Class 3 CA, CN=PolCert Class 3 CA | TRUE, pathlen:0 |
| C=PL, O=E-Telbank Sp. z o.o., OU=PolCert Object Publishing CA, CN=PolCert Object Publishing CA | TRUE, pathlen:0 |
| CN=Leumi, O=Bank Leumi Le-Israel LTD, C=IL | TRUE, pathlen:0 |
| O=Cybertrust Inc, CN=Cybertrust Public SureServer SV CA | TRUE, pathlen:0 |
| C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=PositiveSSL CA | TRUE, pathlen:1 |
| C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA | TRUE, pathlen:1 |
| C=US, ST=New Jersey, L=Jersey City, O=OptimumSSL CA, CN=OptimumSSL CA | TRUE, pathlen:1 |
| CN=Microsoft Internet Authority | TRUE, pathlen:1 |
| O=Telstra Corporation Limited, CN=Telstra RSS Policy CA | TRUE, pathlen:1 |
| C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA | TRUE, pathlen:1 |
| CN=Microsoft Internet Authority | TRUE, pathlen:1 |
| emailAddress=pki_admin at sungard.com, O=SunGard Availability Services, CN=SAS Public CA v1 | TRUE, pathlen:1 |
| C=DE, O=adidas AG, CN=adidas Global Intermediate CA 01 | TRUE, pathlen:1 |
| C=US, O=VISA, OU=Visa International Service Associations, CN=e-Visa | TRUE, pathlen:1 |
| C=JP, O=INTEC Communications Inc., CN=EINS/PKI Public Certification Authority | TRUE, pathlen:1 |
| C=US, O=SecureTrust Corporation, CN=SecureTrust CA | TRUE, pathlen:1 |
| C=US, O=SecureTrust Corporation, CN=SecureTrust CA | TRUE, pathlen:1 |
| C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA | TRUE, pathlen:1 |
| DC=com, DC=disney, OU=PKI, CN=The Walt Disney Company CA | TRUE, pathlen:1 |
| DC=com, DC=disney, OU=PKI, CN=The Walt Disney Company Commerce CA | TRUE, pathlen:1 |
| DC=com, DC=disney, OU=PKI, CN=The Walt Disney Company Enterprise CA | TRUE, pathlen:1 |
| C=US, O=MasterCard Worldwide, OU=Key Management Services, CN=MasterCard Public Sub CA Gen 3 | TRUE, pathlen:1 |
| C=US, ST=New Jersey, L=Jersey City, O=Positive Software Corporation, CN=LiteSSL CA | TRUE, pathlen:1 |
| CN=Cadence Internet Authority | TRUE, pathlen:1 |
| C=US, O=Bechtel Corporation, OU=Information Security, CN=Bechtel External Policy CA 1 | TRUE, pathlen:1 |
| DC=local, DC=experian, CN=Configuration, CN=Services, CN=Public Key Services, CN=AIA, CN=Experian Primary CA | TRUE, pathlen:1 |
| C=DE, O=Forschungszentrum Juelich GmbH, CN=FZJ Certification Authority - G02/emailAddress=ca at fz-juelich.de | TRUE, pathlen:1 |
| C=DE, L=Potsdam, O=Universitaet Potsdam, CN=Universitaet Potsdam CA - G01/emailAddress=pki-admin at uni-potsdam.de | TRUE, pathlen:1 |
| O=Dell Inc., CN=Dell Inc. Enterprise CA | TRUE, pathlen:1 |
| O=Network Associates, OU=NAI Certificate Services, CN=NAI SSL CA v1 | TRUE, pathlen:1 |
| C=DE, O=Fraunhofer, OU=Fraunhofer Corporate PKI, CN=Fraunhofer Root CA 2007 | TRUE, pathlen:1 |
| DC=edu, DC=gemini, C=US, OU=Information Systems Group, O=AURA - Gemini Observatory, CN=GEMINI-CA | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Karlsruhe, O=Karlsruhe Institute of Technology, OU=Steinbuch Centre for Computing, CN=KIT-CA/emailAddress=ca at kit.edu | TRUE, pathlen:1 |
| C=DE, O=Universitaet Karlsruhe, CN=UNIKA-CA/emailAddress=ca at uni-karlsruhe.de | TRUE, pathlen:1 |
| C=DE, O=T-Systems Enterprise Services GmbH, OU=Trust Center Deutsche Telekom, CN=Deutsche Telekom CA 5 | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Heidelberg, O=Universitaet Heidelberg, OU=uni, CN=Uni-HD2-CA/emailAddress=pki at urz.uni-heidelberg.de | TRUE, pathlen:1 |
| CN=UIS-IntB-CA | TRUE, pathlen:1 |
| CN=UIS-IntB-CA | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Muenchen, O=Ludwig-Maximilians-Universitaet Muenchen, CN=LMU-CA/emailAddress=pki at lmu.de | TRUE, pathlen:1 |
| C=DE, O=Technische Universitaet Dortmund, OU=ITMC, CN=TU Dortmund CA - G01/emailAddress=ca at pki.tu-dortmund.de | TRUE, pathlen:1 |
| C=DK, O=TDC Internet, OU=TDC Internet Root CA | TRUE, pathlen:1 |
| C=DK, O=TDC Internet, OU=TDC Internet Root CA | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Muenchen, O=Leibniz-Rechenzentrum, OU=LRZ-CA, CN=LRZ-CA - G01/emailAddress=pki at lrz-muenchen.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Heidelberg, O=Paedagogische Hochschule Heidelberg, OU=IfDI, CN=PH Heidelberg CA/emailAddress=pki at ph-heidelberg.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Muenchen, O=Hochschule Muenchen, CN=Hochschule Muenchen CA/emailAddress=dfn-ca at hm.edu | TRUE, pathlen:1 |
| C=DE, O=T-Systems Enterprise Services GmbH, OU=Trust Center Deutsche Telekom, CN=Deutsche Telekom CA 6 | TRUE, pathlen:1 |
| C=US, ST=New Jersey, L=Jersey City, O=Positive Software Corporation, CN=LiteSSL CA | TRUE, pathlen:1 |
| C=US, O=BAH, OU=Components, CN=Booz Allen Hamilton CA 2 | TRUE, pathlen:1 |
| O=Sun Microsystems Inc, OU=VeriSign Trust Network, OU=Class 3 MPKI Secure Server CA, CN=Sun Microsystems Inc SSL CA | TRUE, pathlen:1 |
| C=US, O=SAIC, OU=PKI, CN=SAIC Public Policy CA 01 | TRUE, pathlen:1 |
| O=Munich Re Group, CN=MRG Intermediate CA 01 | TRUE, pathlen:1 |
| C=DE, O=Max-Planck-Gesellschaft, CN=MPG CA/emailAddress=mpg-ca at mpg.de | TRUE, pathlen:1 |
| C=DE, ST=Berlin, L=Berlin, O=Konrad-Zuse-Zentrum fuer Informationstechnik Berlin (ZIB), CN=ZIB-CA/emailAddress=ca at zib.de | TRUE, pathlen:1 |
| C=DE, ST=Hessen, L=Darmstadt, O=Technische Universitaet Darmstadt, CN=TUD CA G01/emailAddress=tud-ca at hrz.tu-darmstadt.de | TRUE, pathlen:1 |
| C=DE, O=Technische Universitaet Berlin, CN=TUB-CA/emailAddress=ca at TU-Berlin.DE | TRUE, pathlen:1 |
| C=DE, O=Universitaet Osnabrueck, OU=Rechenzentrum, CN=Uni-Osnabrueck RZ-CA G-002/emailAddress=ca at uni-osnabrueck.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Erlangen, O=Universitaet Erlangen-Nuernberg, OU=RRZE, CN=FAU-CA/emailAddress=ca at rrze.uni-erlangen.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Bonn, O=Universitaet Bonn, OU=Hochschulrechenzentrum, CN=Universitaet Bonn CA/emailAddress=caadmin at uni-bonn.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Hagen, O=FernUniversitaet in Hagen, OU=Zentrum fuer Medien und IT, CN=FernUniversitaet in Hagen Global CA/emailAddres | TRUE, pathlen:1 |
| C=DE, O=Universitaet Bayreuth, CN=Universitaet Bayreuth CA (UNIBT-CA) G01/emailAddress=CA at Uni-Bayreuth.DE | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Wuppertal, O=Bergische Universitaet Wuppertal, OU=ZIM, CN=Uni-Wuppertal CA/emailAddress=pki at uni-wuppertal.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Regensburg, O=Universitaet Regensburg, CN=Uni Regensburg CA - G01/emailAddress=pki at uni-regensburg.de | TRUE, pathlen:1 |
| C=DE, O=Universitaet Duisburg-Essen, OU=Zentrum fuer Informations- und Mediendienste, CN=Universitaet Duisburg-Essen CA -G01/emailAddress=caadmin at uni | TRUE, pathlen:1 |
| CN=GDT-SubCA-Public | TRUE, pathlen:1 |
| C=JP, O=Fuji Xerox, CN=Fuji Xerox Certification Authority | TRUE, pathlen:1 |
| C=DE, ST=Hamburg, L=Hamburg, O=Universitaet Hamburg, OU=Regionales Rechenzentrum, CN=UHH CA - G02/emailAddress=uhh-ca at uni-hamburg.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Mannheim, O=Universitaet Mannheim, OU=Rechenzentrum, CN=RUM-CA-G Zertifizierungsinstanz/emailAddress=rum-ca at rz.uni-man | TRUE, pathlen:1 |
| C=US, ST=OH, L=Oxford, O=Miami University, OU=IT Services, CN=pantheon | TRUE, pathlen:1 |
| C=DE, L=Koeln, O=Universitaet zu Koeln, CN=UniKoeln CA/emailAddress=camaster at uni-koeln.de | TRUE, pathlen:1 |
| C=US, DC=edu, DC=nau, DC=froot, ST=Arizona, L=Flagstaff, O=Northern Arizona University, CN=NAU Online Enterprise Issuing CA | TRUE, pathlen:1 |
| C=DE, O=Technische Universitaet Hamburg-Harburg, OU=Rechenzentrum, CN=TUHH CA in DFN-PKI Global - G01/emailAddress=tuhh-dfnpki-ra at tu-harburg.de | TRUE, pathlen:1 |
| C=DE, ST=Niedersachsen, L=Goettingen, O=Georg-August-Universitaet Goettingen, CN=Universitaet-Goettingen CA/emailAddress=gwdg-ca at gwdg.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Duesseldorf, O=Heinrich-Heine-Universitaet Duesseldorf, CN=Uni Duesseldorf CA-G01/emailAddress=ca at uni-duesseldorf.de | TRUE, pathlen:1 |
| C=DE, O=Universitaet Ulm, CN=Global-Uni-Ulm-CA/emailAddress=ca at uni-ulm.de | TRUE, pathlen:1 |
| C=DE, ST=Saarland, L=Saarbruecken, O=Universitaet des Saarlandes, CN=CA Universitaet des Saarlandes/emailAddress=ca at rz.uni-saarland.de | TRUE, pathlen:1 |
| C=DE, O=Alfred-Wegener-Institut, CN=Alfred-Wegener-Institut CA - G01/emailAddress=pki at awi.de | TRUE, pathlen:1 |
| C=US, DC=edu, DC=nau, DC=froot, ST=Arizona, L=Flagstaff, O=Northern Arizona University, CN=NAU Online Enterprise Issuing CA | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Stuttgart, O=Staatliche Hochschule f. Musik u. Darstellende Kunst Stuttgart, CN=MH Stuttgart CA/emailAddress=ca at mh-stu | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Bochum, O=Ruhr-Universitaet Bochum, CN=Ruhr-Universitaet Bochum CA/emailAddress=rubca at ruhr-uni-bochum.de | TRUE, pathlen:1 |
| C=DE, ST=Niedersachsen, L=Oldenburg, O=Universitaet Oldenburg, OU=IT-Dienste, CN=Universitaet Oldenburg PKI/emailAddress=pki at uni-oldenburg.de | TRUE, pathlen:1 |
| C=DE, ST=Hamburg, L=Hamburg, O=HafenCity Universitaet Hamburg, CN=HafenCity Universitaet Hamburg CA - G01/emailAddress=pki at hcu-hamburg.de | TRUE, pathlen:1 |
| C=DE, O=Hochschulservicezentrum Baden-Wuerttemberg, OU=SNA, CN=HSZ-BW CA/emailAddress=ca at hsz-bw.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Freiburg, O=Paedagogische Hochschule Freiburg, OU=ZIK, CN=PH-FR CA/emailAddress=pki at ph-freiburg.de | TRUE, pathlen:1 |
| C=DE, ST=Berlin, L=Berlin, O=Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH, CN=HZB CA/emailAddress=hzbca at helmholtz-berlin.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Weingarten, O=Paedagogische Hochschule Weingarten, CN=Paedagogische Hochschule Weingarten CA/emailAddress=phwgtca at ph-w | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Augsburg, O=Universitaet Augsburg, OU=Rechenzentrum, CN=UAUX-CA/emailAddress=ca-admin at rz.uni-augsburg.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Muenchen, O=Universitaet der Bundeswehr Muenchen, CN=UniBwM CA-G01/emailAddress=pki at unibw.de | TRUE, pathlen:1 |
| C=IE, ST=Dublin, L=Dublin, O=Digi-Sign Limited, OU=Terms and Conditions of use: http://www.digi-sign.com/repository, CN=Digi-Sign CA Digi-SSL Xs | TRUE, pathlen:1 |
| C=IE, ST=Dublin, L=Dublin, O=Digi-Sign Limited, OU=Terms and Conditions of use: http://www.digi-sign.com/repository, CN=Digi-Sign CA Digi-SSL Xp | TRUE, pathlen:1 |
| C=DE, O=Fachhochschule Oldenburg/Ostfriesland/Wilhelmshaven, OU=Hochschulrechenzentrum, CN=FH-OOW CA - G02/emailAddress=pki at fh-oow.de | TRUE, pathlen:1 |
| C=DE, O=Universitaet Leipzig, OU=URZ, CN=UNIVERSITAET LEIPZIG CA/emailAddress=pki at uni-leipzig.de | TRUE, pathlen:1 |
| C=US, O=SAIC, OU=PKI, CN=SAIC Public Policy CA 01 | TRUE, pathlen:1 |
| C=DE, O=Technische Universitaet Bergakademie Freiberg, OU=Universitaetsrechenzentrum, CN=TU Bergakademie Freiberg CA (TUBAF-CA)/emailAddress=tubaf-ca | TRUE, pathlen:1 |
| C=DE, O=Helmut-Schmidt-Universitaet Universitaet der Bundeswehr Hamburg, CN=HSU CA - G01/emailAddress=ca at hsu-hh.de | TRUE, pathlen:1 |
| C=UK, O=Vodafone Group, CN=Vodafone (Corporate Domain 2009) | TRUE, pathlen:1 |
| C=DE, ST=Mecklenburg-Vorpommern, L=Rostock, O=Leibniz-Institut fuer Katalyse e.V., CN=LIKAT CA/emailAddress=ca at catalysis.de | TRUE, pathlen:1 |
| C=SE, O=AddTrust Sweden AB, CN=AddTrust Global Server CA v.2 | TRUE, pathlen:1 |
| C=DE, O=Fachhochschule Emden/Leer, CN=FH-EL CA/emailAddress=pki at fh-el.de | TRUE, pathlen:1 |
| C=DE, O=Gesellschaft fuer Schwerionenforschung mbH (GSI), OU=GF/W, CN=GSI CA 02/emailAddress=pki at gsi.de | TRUE, pathlen:1 |
| C=DE, ST=Berlin, L=Berlin, O=Fritz-Haber-Institut der Max-Planck-Gesellschaft, OU=PPB, CN=Fritz-Haber-Institut CA/emailAddress=pki at fhi-berlin.mpg.de | TRUE, pathlen:1 |
| C=DE, O=Technische Universitaet Dresden, OU=ZIH, CN=TU Dresden CA - G02/emailAddress=pki at tu-dresden.de | TRUE, pathlen:1 |
| C=DE, ST=Thueringen, L=Jena, O=Universitaet Jena, CN=Universitaet Jena CA - G01/emailAddress=pki at uni-jena.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Konstanz, O=Hochschule Konstanz Technik, Wirtschaft und Gestaltung, CN=HTWG KN CA/emailAddress=pki at htwg-konstanz.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Aalen, O=Hochschule Aalen, CN=HS-Aalen-CA-G01/emailAddress=pki at htw-aalen.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, O=Fachhochschule Weihenstephan, CN=FHW CA - G01/emailAddress=pki at fh-weihenstephan.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Ulm, O=Hochschule Ulm, CN=HS-Ulm-CA/emailAddress=pki at hs-ulm.de | TRUE, pathlen:1 |
| C=DE, ST=Berlin, L=Berlin, O=Beuth Hochschule fuer Technik Berlin, OU=Hochschulrechenzentrum, CN=Beuth Hochschule Berlin CA/emailAddress=pki at beuth-ho | TRUE, pathlen:1 |
| C=DE, ST=Berlin, L=Berlin, O=Technische Fachhochschule Berlin, OU=Hochschulrechenzentrum, CN=TFH Berlin CA/emailAddress=pki at tfh-berlin.de | TRUE, pathlen:1 |
| C=DE, O=Georg-Simon-Ohm-Hochschule f. angewandte Wissenschaften FH Nbg, OU=Rechenzentrum, CN=Ohm CA - G01/emailAddress=HS-PKI at ohm-hochschule.de | TRUE, pathlen:1 |
| C=DE, L=Darmstadt, O=Hochschule Darmstadt, CN=Hochschule Darmstadt/emailAddress=pki at h-da.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule Mannheim, CN=HS Mannheim CA/emailAddress=pki at hs-mannheim.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule Furtwangen, OU=Rechenzentrum, CN=HFU CA - G01/emailAddress=pki-ca at hs-furtwangen.de | TRUE, pathlen:1 |
| C=DE, O=Westsaechsische Hochschule Zwickau, CN=WHZ Zwickau CA/emailAddress=WHZCA at fh-zwickau.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule fuer Technik und Wirtschaft Berlin, OU=HRZ, CN=Hochschule fuer Technik und Wirtschaft Berlin/emailAddress=ca at htw-berlin.de | TRUE, pathlen:1 |
| C=DE, ST=Niedersachsen, L=Hannover, O=Fachhochschule Hannover, OU=Rechenzentrum, CN=Fachhochschule Hannover CA/emailAddress=pki at fh-hannover.de | TRUE, pathlen:1 |
| C=DE, ST=Hessen, L=Frankfurt am Main, O=Johann Wolfgang Goethe-Universitaet, CN=UNI-FFM CA/emailAddress=ca at uni-frankfurt.de | TRUE, pathlen:1 |
| C=DE, ST=Niedersachsen, L=Wolfenbuettel, O=Fachhochschule Braunschweig/Wolfenbuettel, OU=Rechenzentrum, CN=FHWF-CA/emailAddress=pki at fh-wolfenbuettel. | TRUE, pathlen:1 |
| C=DE, ST=Sachsen, L=Mittweida, O=Hochschule Mittweida (FH) - University of Applied Sciences, CN=HTWM CA/emailAddress=pki at htwm.de | TRUE, pathlen:1 |
| C=DE, O=Humboldt-Universitaet zu Berlin, CN=HU-CA/emailAddress=pki at hu-berlin.de | TRUE, pathlen:1 |
| C=DE, O=T-Systems Enterprise Services GmbH, OU=Systems Integration Region 1 Standort Berlin, CN=T-Systems SI CA/emailAddress=pki at atriumberlin.de | TRUE, pathlen:1 |
| C=DE, ST=Sachsen, L=Leipzig, O=Hochschule fuer Technik, Wirtschaft und Kultur Leipzig, CN=HTWK Leipzig CA/emailAddress=ca at htwk-leipzig.de | TRUE, pathlen:1 |
| C=DE, O=Bundesamt fuer Kartographie und Geodaesie, CN=Bundesamt fuer Kartographie und Geodaesie CA/emailAddress=pki at bkg.bund.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule Heilbronn, OU=Rechenzentrum, CN=Hochschule Heilbronn CA-G02/emailAddress=pki at hs-heilbronn.de | TRUE, pathlen:1 |
| C=DE, O=Technische Universitaet Ilmenau, CN=TU Ilmenau CA/emailAddress=pki at tu-ilmenau.de | TRUE, pathlen:1 |
| C=DE, ST=Sachsen, L=Leipzig, O=Helmholtz-Zentrum fuer Umweltforschung GmbH - UFZ, OU=WKDV, CN=Helmholtz-Zentrum fuer Umweltforschung GmbH - UFZ CA - | TRUE, pathlen:1 |
| C=DE, O=Duale Hochschule Baden-Wuerttemberg, CN=DHBW CA - G01/emailAddress=pki at dhbw-vs.de | TRUE, pathlen:1 |
| C=DE, L=Offenbach am Main, O=Deutscher Wetterdienst, OU=GB TI Ref. TI 16, CN=Deutscher Wetterdienst CA - G01/emailAddress=dwd.webssl at dwd.de | TRUE, pathlen:1 |
| C=DE, ST=Sachsen-Anhalt, L=Halle, O=Martin-Luther-Universitaet Halle-Wittenberg, OU=URZ, CN=Universitaet Halle CA/emailAddress=pki at uni-halle.de | TRUE, pathlen:1 |
| C=DE, O=Campus Berlin-Buch, OU=Campus-IT, CN=Campus Berlin-Buch CA - G02/emailAddress=ca at bbb-berlin.de | TRUE, pathlen:1 |
| C=DE, ST=Schleswig-Holstein, L=Geesthacht, O=Helmholtz-Zentrum Geesthacht GmbH, CN=HZG CA/emailAddress=ca at hzg.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Ansbach, O=Fachhochschule Ansbach, OU=Hochschulrechenzentrum, CN=FH Ansbach CA/emailAddress=ca at fh-ansbach.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule Offenburg, CN=Hochschule Offenburg CA | TRUE, pathlen:1 |
| C=LU, O=LuxTrust s.a., CN=LuxTrust root CA | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Stuttgart, O=Universitaet Hohenheim, CN=Uni. Hohenheim CA - G01/emailAddress=rz-pki at uni-hohenheim.de | TRUE, pathlen:1 |
| C=US, O=Accenture, OU=Security, CN=Accenture Application Server CA | TRUE, pathlen:1 |
| O=Earthlink Inc, CN=Earthlink Root CA | TRUE, pathlen:1 |
| C=US, O=Entrust, OU=Certification Authorities, CN=Entrust Managed Services Commercial Public Root CA | TRUE, pathlen:1 |
| C=NL, O=DigiNotar, CN=DigiNotar Cyber CA/emailAddress=info at diginotar.nl | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Oberschleissheim-Neuherberg, O=Helmholtz Zentrum Muenchen, OU=Rechenzentrum, CN=Helmholtz Zentrum Muenchen CA - G01/emailAddress=p | TRUE, pathlen:1 |
| C=DE, O=Universitaet Hildesheim, OU=Rechenzentrum, CN=Uni Hildesheim CA/emailAddress=unihica at uni-hildesheim.de | TRUE, pathlen:1 |
| O=ZF, OU=ZF IT, CN=ZF CA 01 | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Aachen, O=Fachhochschule Aachen, OU=DVZ, CN=Fachhochschule Aachen CA - G01/emailAddress=PKI at fh-aachen.de | TRUE, pathlen:1 |
| C=DE, ST=Sachsen-Anhalt, L=Merseburg, O=Hochschule Merseburg (FH), OU=Rechenzentrum, CN=HS Merseburg CA/emailAddress=pki at hs-merseburg.de | TRUE, pathlen:1 |
| C=BR, O=Serasa, OU=Serasa Autoridade Certificadora Global, CN=SerasaACGlobal | TRUE, pathlen:1 |
| CN=PKI FINMECCANICA, O=FINMECCANICA, OU=FINMECCANICA, C=IT | TRUE, pathlen:1 |
| C=IT, O=I.T. Telecom, OU=Servizi di certificazione, CN=I.T. Telecom Global CA | TRUE, pathlen:1 |
| C=AU, O=Department of Education and Training, OU=ITD, CN=NSW-DET-ISS-CA1 | TRUE, pathlen:1 |
| CN=Sempra Energy Secure Server CA1 | TRUE, pathlen:1 |
| CN=Sempra Energy Secure Server CA1 | TRUE, pathlen:1 |
| C=JP, O=Firstserver, Inc., OU=Cert Services, CN=Firstserver Corporate Server CA V2 | TRUE, pathlen:1 |
| C=pt, O=MULTICERT-CA, CN=MULTICERT-CA 02 | TRUE, pathlen:1 |
| C=US, O=Apple Inc., OU=Apple IST Certification Authority, CN=Apple IST CA 1 | TRUE, pathlen:1 |
| C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Primary Normalised CA | TRUE, pathlen:1 |
| C=DE, O=Leibniz-Institut fuer Neurobiologie Magdeburg, CN=ifn-magdeburg CA-G01/emailAddress=pki at ifn-magdeburg.de | TRUE, pathlen:1 |
| C=DE, O=Hochschul-Informations-System GmbH, CN=HIS GmbH CA/emailAddress=ca at his.de | TRUE, pathlen:1 |
| C=DE, O=Physikalisch-Technische Bundesanstalt, CN=PTB CA/emailAddress=pki at ptb.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Coburg, O=Hochschule fuer angewandte Wissenschaften Fachhochschule Coburg, CN=FH-Coburg CA/emailAddress=fhc-pki at fh-coburg.de | TRUE, pathlen:1 |
| C=DE, O=Fachhochschule Wuerzburg-Schweinfurt, CN=Fachhochschule Wuerzburg-Schweinfurt CA 3 (FHWS-CA 3)/emailAddress=ca at fh-sw.de | TRUE, pathlen:1 |
| C=DE, L=Berlin, O=Deutsches Herzzentrum Berlin, OU=Informationstechnik, CN=Deutsches Herzzentrum Berlin Zertifizierungsstelle/emailAddress=pki at dhzb.d | TRUE, pathlen:1 |
| C=DE, O=Hochschule Bremerhaven, OU=ZBRV, CN=Hochschule Bremerhaven CA/emailAddress=pki at hs-bremerhaven.de | TRUE, pathlen:1 |
| C=TR, L=Gebze - Kocaeli, O=T\xC3\xBCrkiye Bilimsel ve Teknolojik Ara\xC5\x9Ft\xC4\xB1rma Kurumu - T\xC3\x9CB\xC4\xB0TAK, OU=Ulusal Elektronik ve Krip | TRUE, pathlen:1 |
| C=DE, O=GESIS, OU=IT, CN=GESIS-CA/emailAddress=gesis-ca at gesis.org | TRUE, pathlen:1 |
| C=DE, O=Giesecke and Devrient, OU=Corporate CA, CN=Giesecke and Devrient Corporate CA | TRUE, pathlen:1 |
| C=DE, O=HAWK Fachhochschule Hildesheim/Holzminden/Goettingen, OU=Rechenzentrum, CN=HAWK-HHG-CA - G02/emailAddress=rechenzentrum at hawk-hhg.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule fuer Wirtschaft und Umwelt Nuertingen-Geislingen, CN=HfWU/emailAddress=ca at hfwu.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Karlsruhe, O=Hochschule Karlsruhe - Technik und Wirtschaft, CN=HSKA-CA/emailAddress=iz-ca at hs-karlsruhe.de | TRUE, pathlen:1 |
| C=DE, ST=Sachsen, L=Dresden, O=IFW Dresden e.V., CN=IFW Dresden CA/emailAddress=ca at ifw-dresden.de | TRUE, pathlen:1 |
| C=IT, O=Intesa Sanpaolo S.p.A., CN=Intesa Sanpaolo S.p.A. - CA Root Interna | TRUE, pathlen:1 |
| C=DE, O=Hochschulbibliothekszentrum NRW, OU=Rechenzentrum, CN=hbz NRW CA - G02/emailAddress=pki at hbz-nrw.de | TRUE, pathlen:1 |
| C=DE, ST=Niedersachsen, L=Hannover, O=Stiftung Tieraerztliche Hochschule Hannover, CN=TiHo Hannover CA/emailAddress=ca at tiho-hannover.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Muenster, O=Fachhochschule Muenster, OU=Datenverarbeitungszentrale, CN=FH Muenster CA - G01/emailAddress=ca at fh-muenst | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Ludwigsburg, O=Paedagogische Hochschule Ludwigsburg, OU=Hochschulrechenzentrum, CN=PH Ludwigsburg CA - G01/emailAddres | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Schwaebisch Gmuend, O=Paedagogische Hochschule Schwaebisch Gmuend, OU=MIZ, CN=PH Schwaebisch Gmuend CA/emailAddress=ra | TRUE, pathlen:1 |
| C=DE, O=Paedagogische Hochschule Karlsruhe, OU=ZIM, CN=PHKA CA/emailAddress=pki at ph-karlsruhe.de | TRUE, pathlen:1 |
| C=AE, O=Etisalat, OU=Etisalat eBusiness Services, CN=Comtrust Root Certification Authority | TRUE, pathlen:1 |
| C=DE, ST=Niedersachsen, L=Braunschweig, O=Helmholtz-Zentrum fuer Infektionsforschung GmbH, OU=Rechenzentrum, CN=Helmholtz-Zentrum fuer Infektionsfors | TRUE, pathlen:1 |
| C=DE, ST=Sachsen, L=Leipzig, O=Hochschule fuer Musik und Theater Leipzig, CN=HMT-LEIPZIG-CA/emailAddress=pki at hmt-leipzig.de | TRUE, pathlen:1 |
| C=BE, O=KBC Group, CN=KBC Group Root CA | TRUE, pathlen:1 |
| C=DE, O=T-Systems Enterprise Services GmbH, OU=Trust Center Deutsche Telekom, CN=Shared Business CA | TRUE, pathlen:1 |
| C=DE, O=Universitaet Flensburg, OU=ZIMT, CN=Uni Flensburg CA/emailAddress=ca at uni-flensburg.de | TRUE, pathlen:1 |
| CN=EBG Web Sunucu Sertifika Hizmet Sa\xC4\x9Flay\xC4\xB1c\xC4\xB1s\xC4\xB1, O=EBG Bili\xC5\x9Fim Teknolojileri ve Hizmetleri A.\xC5\x9E., C=TR | TRUE, pathlen:1 |
| C=DE, O=Deutsches Institut fuer Wirtschaftsforschung e.V. (DIW Berlin), OU=IT, CN=DIW Berlin CA/emailAddress=diw-ca at diw.de | TRUE, pathlen:1 |
| C=DE, O=Friedrich-Loeffler-Institut, CN=FLI CA/emailAddress=pki at fli.bund.de | TRUE, pathlen:1 |
| C=DE, O=Mitteldeutscher Rundfunk, CN=MDR CA | TRUE, pathlen:1 |
| C=DE, O=Deutscher Bundestag, OU=Deutscher Bundestag, CN=Deutscher Bundestag CA - G01/emailAddress=pki-ca at bundestag.de | TRUE, pathlen:1 |
| C=DE, ST=Brandenburg, L=Nuthetal, O=Deutsches Institut fuer Ernaehrungsforschung (DIfE), OU=IT, CN=DIfE CA/emailAddress=ra at dife.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule fuer Gestaltung Karlsruhe, CN=Hochschule fuer Gestaltung Karlsruhe CA - G01/emailAddress=pki at hfg.edu | TRUE, pathlen:1 |
| C=DE, L=Frankfurt am Main, O=Deutsche Nationalbibliothek, CN=DNB-CA/emailAddress=ca at d-nb.de | TRUE, pathlen:1 |
| C=DE, ST=Schleswig-Holstein, L=Luebeck, O=Fachhochschule Luebeck, OU=Rechenzentrum, CN=Fachhochschule Luebeck CA - G01/emailAddress=ca at fh-luebeck.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Karlsruhe, O=Zentrum fuer Kunst und Medientechnologie Karlsruhe, OU=EDV, CN=ZKM-EDV/emailAddress=edv at zkm.de | TRUE, pathlen:1 |
| C=BE, O=Certipost s.a./n.v., CN=Certipost E-Trust Primary Normalised CA | TRUE, pathlen:1 |
| C=DE, ST=Bremen, L=Bremen, O=Hochschule fuer Kuenste Bremen, CN=HFK-BREMEN-CA/emailAddress=hotline at hfk-bremen.de | TRUE, pathlen:1 |
| C=DE, ST=Brandenburg, L=Wildau, O=Technische Fachhochschule Wildau, OU=Hochschulrechenzentrum, CN=TFH Wildau CA/emailAddress=pki at tfh-wildau.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule Kempten, CN=HS Kempten CA/emailAddress=pki at fh-kempten.de | TRUE, pathlen:1 |
| C=NL, O=DigiNotar, CN=DigiNotar Root CA/emailAddress=info at diginotar.nl | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Biberach, O=Hochschule Biberach, OU=Rechenzentrum, CN=HBC-Global CA - G 01/emailAddress=pki at fh-biberach.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule Ostwestfalen-Lippe, CN=HS OWL CA - G01/emailAddress=ca at hs-owl.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule fuer Technik Stuttgart, OU=Rechenzentrum, CN=HfT-Stuttgart CA-G01/emailAddress=pki at hft-stuttgart.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Karlsruhe, O=Badische Landesbibliothek, OU=IT-Abteilung, CN=BLB Karlsruhe CA/emailAddress=ca at blb-karlsruhe.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Muenchen, O=Bayerische Staatsbibliothek, OU=Bayerische Staatsbibliothek, CN=BSB-CA/emailAddress=pki at bsb-muenchen.de | TRUE, pathlen:1 |
| C=DE, ST=Mecklenburg-Vorpommern, L=Schwerin, O=Ministerium fuer Bildung, Wissenschaft und Kultur M-V, OU=BMMV-PKI, CN=BMMV CA - G 01/emailAddress=ca@ | TRUE, pathlen:1 |
| C=DE, ST=Brandenburg, L=Wildau, O=Technische Hochschule Wildau, OU=Hochschulrechenzentrum, CN=TH Wildau CA/emailAddress=pki at tfh-wildau.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Koeln, O=Max-Planck-Institut fuer Zuechtungsforschung, OU=SUSAN, CN=MPIZ CA/emailAddress=ca at mpiz-koeln.mpg.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule fuer Musik und Theater Hannover, CN=HMT Hannover CA/emailAddress=pki at hmt-hannover.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Aschaffenburg, O=Fachhochschule Aschaffenburg, OU=Rechenzentrum, CN=Fachhochschule Aschaffenburg/emailAddress=pki2 at fh-aschaffenbur | TRUE, pathlen:1 |
| C=DE, O=Deutsches Institut fuer Internationale Paedagogische Forschung, CN=DIPF CA - G02/emailAddress=ca at dipf.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule Fulda, OU=Datenverarbeitungszentrum, CN=HS Fulda CA - G02/emailAddress=pki at hs-fulda.de | TRUE, pathlen:1 |
| C=DE, ST=Baden-Wuerttemberg, L=Oberwolfach, O=Mathematisches Forschungsinstitut Oberwolfach gGmbH, CN=Mathematisches Forschungsinstitut Oberwolfach g | TRUE, pathlen:1 |
| C=DE, ST=Sachsen, L=Dresden, O=Freistaat Sachsen, OU=Saechsisches Staatsministerium des Innern, CN=Sachsen Global CA/emailAddress=pki at smi.sachsen.de | TRUE, pathlen:1 |
| C=DE, ST=Brandenburg, L=Muencheberg, O=Leibniz-Zentrum fuer Agrarlandschaftsforschung (ZALF) e. V., CN=ZALF CA/emailAddress=pki at zalf.de | TRUE, pathlen:1 |
| C=DE, O=BESSY, OU=EDV, CN=BESSY CA - G02/emailAddress=PKI at bessy.de | TRUE, pathlen:1 |
| C=DE, L=Greifswald, O=Leibniz-Institut fuer Plasmaforschung und Technologie e.V., CN=INP-Greifswald CA/emailAddress=ca at inp-greifswald.de | TRUE, pathlen:1 |
| C=DE, O=Medizinische Hochschule Hannover, CN=MHH CA/emailAddress=pki at mh-hannover.de | TRUE, pathlen:1 |
| C=TR, L=Gebze - Kocaeli, O=T\xC3\xBCrkiye Bilimsel ve Teknolojik Ara\xC5\x9Ft\xC4\xB1rma Kurumu - T\xC3\x9CB\xC4\xB0TAK, OU=Ulusal Elektronik ve Krip | TRUE, pathlen:1 |
| C=DE, ST=Brandenburg, L=Frankfurt (Oder), O=Europa-Universitaet Viadrina Frankfurt (Oder), CN=Europa-Universitaet Viadrina CA/emailAddress=pki at europa | TRUE, pathlen:1 |
| C=DE, O=Fachhochschule Erfurt, OU=Hochschulrechenzentrum, CN=FH-Erfurt-CA/emailAddress=hrz at fh-erfurt.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, O=Hochschule Bonn-Rhein-Sieg, CN=Hochschule Bonn-Rhein-Sieg CA - G01/emailAddress=pki at hochschule-bonn-rhein-sieg.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule Bremen, CN=Hochschule Bremen CA 1/emailAddress=pki at hs-bremen.de | TRUE, pathlen:1 |
| C=DE, O=Bundesamt fuer Strahlenschutz, CN=Bundesamt fuer Strahlenschutz CA/emailAddress=bfs-pki at bfs.de | TRUE, pathlen:1 |
| C=DE, ST=Hessen, L=Frankfurt, O=Max-Planck-Institut fuer Biophysik, OU=Zentrale IT, CN=Max-Planck-Institut fuer Biophysik ZIT-CA/emailAddress=CA at mpib | TRUE, pathlen:1 |
| C=DE, ST=Berlin, L=Berlin, O=STIFTUNG PREUSSISCHER KULTURBESITZ, CN=STIFTUNG PREUSSISCHER KULTURBESITZ - CA/emailAddress=ca at hv.spk-berlin.de | TRUE, pathlen:1 |
| C=DE, ST=Thueringen, L=Jena, O=Fachhochschule Jena, OU=ServiceZentrum Informatik, CN=FHJ CA - G01/emailAddress=pki at fh-jena.de | TRUE, pathlen:1 |
| C=DE, O=Universitaet der Kuenste Berlin, CN=UdK Berlin CA/emailAddress=pki at udk-berlin.de | TRUE, pathlen:1 |
| C=DE, ST=Hamburg, L=Hamburg, O=TuTech Innovation GmbH, CN=TuTech Innovation GmbH/emailAddress=ca at tutech.de | TRUE, pathlen:1 |
| C=DE, ST=Schleswig-Holstein, L=Elmshorn, O=NORDAKADEMIE gAG, CN=NORDAKADEMIE CA-01/emailAddress=pki at nordakademie.de | TRUE, pathlen:1 |
| C=DE, O=GAD eG, OU=VR IDENT, CN=VR IDENT EXTERNAL ROOT CA 2009 | TRUE, pathlen:1 |
| C=DE, O=Universitaet Erfurt, CN=Universitaet Erfurt CA - G01/emailAddress=pki at uni-erfurt.de | TRUE, pathlen:1 |
| C=DE, O=Fachhochschule Regensburg, CN=FH Regensburg CA/emailAddress=pki at fh-regensburg.de | TRUE, pathlen:1 |
| C=DE, O=Dioezese Rottenburg-Stuttgart, CN=DRS CA - G01/emailAddress=pki at drs.de | TRUE, pathlen:1 |
| C=DE, O=Berlin-Brandenburgische Akademie der Wissenschaften, OU=Informationstechnologie, CN=BBAW-CA 1/emailAddress=ca at bbaw.de | TRUE, pathlen:1 |
| C=pt, O=MULTICERT-CA, CN=MULTICERT-CA 02 | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Hof, O=Hochschule fuer angewandte Wissenschaften Fachhochschule Hof, OU=Rechenzentrum, CN=Hochschule fuer angewandte Wissenschafte | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Gelsenkirchen, O=Fachhochschule Gelsenkirchen, OU=ZIM-IT, CN=FHGE CA - G01/emailAddress=pki at fh-gelsenkirchen.de | TRUE, pathlen:1 |
| C=DE, ST=Thueringen, L=Jena, O=Institut fuer Photonische Technologien e.V., OU=EDV/IPHT, CN=IPHT-JENA-CA/emailAddress=ipht-cert at ipht-jena.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, O=Fachhochschule Bonn-Rhein-Sieg, CN=Fachhochschule Bonn-Rhein-Sieg CA - G01/emailAddress=pki at fh-brs.de | TRUE, pathlen:1 |
| C=DE, O=Hochschule fuer Wirtschaft und Recht Berlin, CN=HWR Berlin CA/emailAddress=pki at hwr-berlin.de | TRUE, pathlen:1 |
| C=DE, O=IHP GmbH, CN=IHP-CA/emailAddress=pki.ca at ihp-microelectronics.com | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Deggendorf, O=Hochschule fuer angewandte Wissenschaften - FH Deggendorf, OU=Rechenzentrum, CN=Hochschule Deggendorf CA - G01/email | TRUE, pathlen:1 |
| C=DE, O=IPK Gatersleben, CN=IPK Gatersleben CA - G02/emailAddress=ca at ipk-gatersleben.de | TRUE, pathlen:1 |
| C=DE, O=Berufsakademie Sachsen Staatliche Studienakademie Bautzen, CN=BA Sachsen Staatliche Studienakademie Bautzen CA/emailAddress=ca at ba-bautzen.de | TRUE, pathlen:1 |
| C=DE, O=Fachhochschule Schmalkalden, OU=Rechenzentrum, CN=Fachhochschule Schmalkalden CA - G01/emailAddress=pki at fh-schmalkalden.de | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Ingolstadt, O=Hochschule fuer angewandte Wissenschaften FH Ingolstadt, OU=Rechenzentrum, CN=HAW Ingolstadt CA - G01/emailAddress=p | TRUE, pathlen:1 |
| C=DE, O=Forschungsverbund Berlin e.V., OU=Corporate Network, CN=FV Berlin - PKI CA/emailAddress=pki-ca at fv-berlin.de | TRUE, pathlen:1 |
| C=DE, O=Fachhochschule Neu-Ulm, OU=Rechenzentrum, CN=FH Neu-Ulm CA - G01/emailAddress=pki at fh-neu-ulm.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Bonn, O=Max-Planck-Institut zur Erforschung von Gemeinschaftsguetern, CN=MPI Gemeinschaftsgueter CA/emailAddress=ca at c | TRUE, pathlen:1 |
| C=DE, ST=Brandenburg, L=Brandenburg an der Havel, O=Fachhochschule Brandenburg, OU=ZIMK/Rechenzentrum, CN=FHB-CA/emailAddress=fhb-ca at fh-brandenburg.d | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Dortmund, O=Leibniz-Institut fuer Analytische Wissenschaften - ISAS - e.V., OU=IT, CN=ISAS CA - G01/emailAddress=pki@ | TRUE, pathlen:1 |
| C=DE, ST=Niedersachsen, L=Hannover, O=Land Niedersachsen, OU=Landesbetrieb fuer Statistik und Kommunikationstechnologie, CN=LSKN CA/emailAddress=ca at l | TRUE, pathlen:1 |
| C=DE, ST=Hessen, L=Wiesbaden, O=Fachhochschule Wiesbaden, OU=IT-Center, CN=FHW-CA/emailAddress=fhw-ca at itc.fh-wiesbaden.de | TRUE, pathlen:1 |
| C=ES, L=C/ Muntaner 244 Barcelona, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068/emailAddress=ca at firmaprofesional.com | TRUE, pathlen:1 |
| C=CZ, O=\xC4\x8Cesk\xC3\xA1 po\xC5\xA1ta, s.p. [I\xC4\x8C 47114983], CN=PostSignum Root QCA 2 | TRUE, pathlen:1 |
| DC=net, DC=bgc, CN=BGC-OffSubCA | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Koeln, O=Rheinische Fachhochschule Koeln gGmbH, OU=Rechenzentrum, CN=RFH Koeln CA/emailAddress=pki at rfh-koeln.de | TRUE, pathlen:1 |
| C=DE, ST=Niedersachsen, L=Lueneburg, O=Leuphana Universitaet Lueneburg, OU=Rechen- und Medienzentrum, CN=Leuphana Universitaet Lueneburg CA/emailAddr | TRUE, pathlen:1 |
| C=DE, ST=Bayern, L=Amberg, O=Hochschule Amberg-Weiden, OU=Rechenzentrum, CN=HAW-CA/emailAddress=ca at haw-aw.de | TRUE, pathlen:1 |
| C=DE, O=T-Systems SfR GmbH, CN=T-Systems SfR CA 2/emailAddress=ca at t-systems-sfr.com | TRUE, pathlen:1 |
| C=DE, ST=Sachsen, L=Leipzig, O=Deutsches BiomasseForschungsZentrum gemeinnuetzige GmbH, CN=DBFZ CA/emailAddress=pki at dbfz.de | TRUE, pathlen:1 |
| C=DE, O=NEC Europe Ltd., OU=NEC Laboratories Europe, CN=NECLAB-CA/emailAddress=zertifizierungsstelle at nw.neclab.eu | TRUE, pathlen:1 |
| C=DE, O=Bundesanstalt fuer Wasserbau, CN=BAW CA/emailAddress=baw-ca at baw.de | TRUE, pathlen:1 |
| C=DE, ST=Nordrhein-Westfalen, L=Bochum, O=Technische Fachhochschule Georg Agricola zu Bochum, CN=Technische Fachhochschule Georg Agricola zu Bochum - | TRUE, pathlen:1 |
| C=CA, O=Syncrude Canada Ltd, CN=Syncrude Corporate Policy CA 2 | TRUE, pathlen:1 |
| C=IE, ST=Dublin, L=Dublin, O=Digi-Sign Limited, OU=Terms and Conditions of use: http://www.digi-sign.com/repository, CN=Digi-Sign CA Digi-ID Xp | TRUE, pathlen:1 |
| emailAddress=camaster at egca.com.tw, C=TW, O=TaiOne International Ltd., OU=CA Center, CN=eLeader Global CA v2 | TRUE, pathlen:1 |
| emailAddress=camaster at egca.com.tw, C=TW, O=TaiOne International Ltd., OU=CA Center, CN=eLeader Global CA | TRUE, pathlen:1 |
| CN=NalcoExternalPolicyCA-1 | TRUE, pathlen:1 |
| C=US, O=First Data Corporation, OU=Certification Authorities, OU=First Data Root CA | TRUE, pathlen:1 |
| C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=OptimumSSL CA | TRUE, pathlen:1 |
| C=US, O=Retail Ventures, OU=Public, CN=Retail Ventures - Public Primary CA | TRUE, pathlen:1 |
| C=DE, O=Deutsche Telekom AG, Laboratories, CN=Deutsche Telekom AG, Laboratories CA - G01/emailAddress=hotline.laboratories at telekom.de | TRUE, pathlen:1 |
| DC=ru, DC=yandex, DC=ld, CN=YandexExternalCA | TRUE, pathlen:1 |
| C=PT, O=MULTICERT-CA, CN=MULTICERT-CA 02 | TRUE, pathlen:1 |
| O=DRS-TEM, CN=DRS-TEM External Issuing CA v1 | TRUE, pathlen:1 |
| C=SE, O=AddTrust Sweden AB, CN=AddTrust Global Server CA v.2 | TRUE, pathlen:1 |
| C=IT, O=Intesa Sanpaolo S.p.A., CN=Intesa Sanpaolo S.p.A. - Certification Authority Principale | TRUE, pathlen:1 |
| emailAddress=jotca at jotankers.com, C=NO, ST=Hordaland, L=Bergen, O=Jo Tankers, CN=Jo Tankers CA | TRUE, pathlen:1 |
| C=NL, O=DigiNotar, CN=DigiNotar Root CA/emailAddress=info at diginotar.nl | TRUE, pathlen:1 |
| C=CH, O=WISeKey, OU=Copyright (c) 2005 WISeKey SA, OU=International, CN=WISeKey CertifyID Standard G1 CA | TRUE, pathlen:1 |
| emailAddress=pkiadmin at shrinenet.org, C=US, OU=HDQ, CN=SHCRoot | TRUE, pathlen:1 |
| emailAddress=pkiadmin at shrinenet.org, C=US, OU=HDQ, CN=SHCRoot | TRUE, pathlen:1 |
| C=DE, O=Bundesinstitut fuer Risikobewertung, CN=BfR CA/emailAddress=ca at bfr.bund.de | TRUE, pathlen:1 |
| C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 | TRUE, pathlen:1 |
| CN=EBG Nitelikli Elektronik Sertifika Hizmet Sa\xC4\x9Flay\xC4\xB1c\xC4\xB1s\xC4\xB1, O=EBG Bili\xC5\x9Fim Teknolojileri ve Hizmetleri A.\xC5\x9E., C | TRUE, pathlen:1 |
| C=DE, O=Hochschule fuer Musik, Theater und Medien Hannover, CN=HMTM Hannover CA/emailAddress=pki at hmtm-hannover.de | TRUE, pathlen:1 |
| CN=Mobile Armor Enterprise CA | TRUE, pathlen:1 |
| C=FR, O=Certplus, CN=Class 2 Primary CA | TRUE, pathlen:10 |
| C=ww, O=global, OU=pki, CN=rootca | TRUE, pathlen:10 |
| emailAddress=pkiadmin at shrinenet.org, C=US, OU=HDQ, CN=shcica | TRUE, pathlen:10 |
| C=ES, O=AC Camerfirma SA, CN=CA Camerfirma Express Corporate Server/serialNumber=A82743287 | TRUE, pathlen:11 |
| C=ES/emailAddress=cmfecs2 at camerfirma.com, L=Madrid (see current address at www.camerfirma.com/address)/serialNumber=A82743287, O=AC Camerfirma SA, CN | TRUE, pathlen:11 |
| C=ES/emailAddress=ac_camerfirma_cc at camerfirma.com, L=Madrid (see current address at www.camerfirma.com/address)/serialNumber=A82743287, O=AC Camerfir | TRUE, pathlen:11 |
| C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Chambers of Commerce Root | TRUE, pathlen:12 |
| C=IN, ST=UP, L=Noida, O=MindGenies, OU=http://www.sslgenie.com, CN=Flash SSLGenie | TRUE, pathlen:2 |
| C=US, O=MasterCard Worldwide, OU=Key Management Services, CN=MasterCard Public Root CA Gen 3 | TRUE, pathlen:2 |
| C=DE, O=DFN-Verein, OU=DFN-PKI, CN=DFN-Verein PCA Global - G01 | TRUE, pathlen:2 |
| O=RSA Security Inc., OU=KCA Services, CN=RSA Corporate Server CA, L=Bedford, ST=Massachusetts, C=US | TRUE, pathlen:2 |
| C=US, O=MasterCard Worldwide, OU=Global Technology and Operations, CN=MasterCard Root Public CA | TRUE, pathlen:2 |
| C=US, ST=OH, L=Oxford, O=Miami University, OU=IT Services, CN=tarquin | TRUE, pathlen:2 |
| emailAddress=its-mensa at nau.edu, ST=Arizona, OU=Information Technology Services, O=Northern Arizona University, L=Flagstaff, C=US, CN=NAU Offline Inte | TRUE, pathlen:2 |
| O=ZF, OU=ZF IT, CN=ZF Root CA | TRUE, pathlen:2 |
| O=Deutsche Post World Net, OU=I2 PS, CN=DPWN SSL CA I2 PS | TRUE, pathlen:2 |
| C=ES, O=Generalitat Valenciana, OU=PKIGVA, CN=Root CA Generalitat Valenciana | TRUE, pathlen:2 |
| C=AU, O=Department of Education and Training, OU=ITD, CN=NSW-DET-INT-CA1 | TRUE, pathlen:2 |
| O=Sempra Energy, CN=Sempra Energy Internet Authority | TRUE, pathlen:2 |
| O=Sempra Energy, CN=Sempra Energy Internet Authority | TRUE, pathlen:2 |
| C=PT, O=Saphety, CN=Saphety Server 01 | TRUE, pathlen:2 |
| CN=Saphety Server 04, O=Saphety Level - Trusted Services SA, C=PT | TRUE, pathlen:2 |
| C=ES, O=AC CAMERFIRMA S.A., L=MADRID (Ver en https://www.camerfirma.com/address), OU=AC CAMERFIRMA/serialNumber=A82743287, CN=AC CAMERFIRMA AAPP | TRUE, pathlen:2 |
| C=IN, ST=UP, L=Noida, O=MindGenies, OU=http://www.sslgenie.com, CN=Premium SSLGenie | TRUE, pathlen:2 |
| C=US, O=Chenega Corporation, CN=Chenega Root CA | TRUE, pathlen:2 |
| C=IN, ST=UP, L=Noida, O=MindGenies, OU=http://www.sslgenie.com, CN=Premium SSLGenie SGC | TRUE, pathlen:2 |
| C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1 | TRUE, pathlen:3 |
| O=RSA Security Inc., OU=KCA Services, CN=RSA Corporate, L=Bedford, ST=Massachusetts, C=US | TRUE, pathlen:3 |
| C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root | TRUE, pathlen:3 |
| DC=com, O=Deutsche Post World Net, OU=IT Services, CN=DPWN Root CA R2 PS | TRUE, pathlen:3 |
| C=IT, O=GlobalTrust, CN=GlobalTrust Certification Authority | TRUE, pathlen:3 |
| emailAddress=admin at unicert.com.br, C=BR, O=Unicert Brasil Certificadora, OU=AC-02 UniCERT, CN=UniCERT Certificadora | TRUE, pathlen:3 |
| C=PT, O=SCEE, CN=ECRaizEstado | TRUE, pathlen:3 |
| C=PT, O=Saphety, CN=Saphety CA 01 | TRUE, pathlen:3 |
| C=PT, O=Saphety, CN=Saphety CA02 | TRUE, pathlen:3 |
| C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root | TRUE, pathlen:3 |
| C=PT, O=SCEE, CN=ECRaizEstado | TRUE, pathlen:3 |
| C=PT, O=SCEE - Sistema de Certifica\xE7\xE3o Electr\xF3nica do Estado, OU=ECEstado, CN=Cart\xE3o de Cidad\xE3o 001 | TRUE, pathlen:3 |
| C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Expressz (Class C) Tanusitvanykiado | TRUE, pathlen:4 |
| C=HU, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Uzleti (Class B) Tanusitvanykiado | TRUE, pathlen:4 |
| C=HU, L=Budapest, O=NetLock Kft., OU=Tan\xC3\xBAs\xC3\xADtv\xC3\xA1nykiad\xC3\xB3k (Certification Services), CN=NetLock \xC3\x9Czleti (Class B) Tan\x | TRUE, pathlen:4 |
| C=HU, ST=Hungary, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Kozjegyzoi (Class A) Tanusitvanykiado | TRUE, pathlen:4 |
| C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2 | TRUE, pathlen:5 |
| C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 1 | TRUE, pathlen:5 |
| C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root CA 1 | TRUE, pathlen:7 |
| C=ww, O=global, OU=pki, CN=issuingca | TRUE, pathlen:9 |
+--------------------------------------------------------------------------------------------------------------------------------------------------------+------------------+
--
Peter Eckersley pde at eff.org
Technology Projects Director Tel +1 415 436 9333 x131
Electronic Frontier Foundation Fax +1 415 436 9993
More information about the Observatory
mailing list