← All Sectigo certificates
Root Certificate
Entrust Root Certification Authority - G4
Sectigo
Browser Trust
Apple
Included
CCADB status only
Chrome
Removed
No direct match
Microsoft
Included
Directly listed
Mozilla
Included
Directly listed
- Trust Bits (root)
Certificate Details
- Record Type
- Root Certificate
- SHA-256
- DB3517D1F6732A2D5AB97C533EC70779EE3270A62FB4AC4238372460E6F01E88
- Parent SHA-256
- —
- Valid From (GMT)
- 2015.05.27
- Valid To (GMT)
- 2037.12.27
- AKI
- —
- SKI
- nzjEViPDOeigcWzoVEzk6Dqxv2c=
- Operated By
- —
- Constrained
- False
- Revocation
- —
- Salesforce ID
- 0011J00001HmHRGQA3
Capabilities
- EV OIDs
- 2.23.140.1.1; 2.16.840.1.114028.10.1.2
- Status of Root
- AppleIncludedGoogle ChromeRemovedMicrosoftIncludedMozillaIncluded
TLSTLS EVCode SigningS/MIME
CAA Identifiers
Recognized CAA issuer identifiers published by CCADB for this CA certificate.
Not disclosed in CCADB
No recognized CAA issuer identifier was found for this CA certificate. CAs are expected to disclose CAA identifiers to CCADB when applicable.
Audit
- Audit Firm
- Deloitte
- Firm Location
- Canada
- Same as Parent
- false
Standard
- Audit URL
- Type
- WebTrust
- Statement
- 2025.11.19
- Period
- 2025.03.01 – 2025.09.17
NetSec
- Audit URL
- Type
- WebTrust
- Statement
- 2025.11.21
- Period
- 2025.03.01 – 2025.09.17
TLS BR
- Audit URL
- Type
- WebTrust
- Statement
- 2025.11.19
- Period
- 2025.03.01 – 2025.09.17
TLS EVG
- Audit URL
- Type
- WebTrust
- Statement
- 2025.11.19
- Period
- 2025.03.01 – 2025.09.17
S/MIME BR
- Audit URL
- Type
- WebTrust
- Statement
- 2025.11.19
- Period
- 2025.03.01 – 2025.09.17
Policy & Documentation
- CP URL
- —
- CP Effective
- —
- CPS URL
- —
- CPS Effective
- —
- CP/CPS Statement
- MD/AsciiDoc URL
- —
Policy OIDs
Certificate
X.509 certificatePolicies · cryptographic fact
No certificatePolicies extension in certificate
CCADB
EV OIDs for Root Cert · administrative declaration
CA/B EV TLS2.23.140.1.12.16.840.1.114028.10.1.2
Comparison
CCADB declares policy OIDs but certificate has none
Marked TLS EV Capable in CCADB but certificate has no policy OIDs
Chain Validation
No parent certificate in CCADB — chain lint requires issuer
Infrastructure
- CRL (Full)
- CRL (Parts)
- —
- ACME DV
- —
- ACME OV
- —
- ACME EV
- —
- Test (Valid)
- —
- Test (Expired)
- —
- Test (Revoked)
- —
Certificate (PEM)