← All Sectigo certificates
Root Certificate
USERTrust RSA Certification Authority
Sectigo
Browser Trust
Apple
Included
CCADB status only
Chrome
Included
Directly listed
Microsoft
Included
Directly listed
Mozilla
Included
Directly listed
- Trust Bits (root)
Certificate Details
- Record Type
- Root Certificate
- SHA-256
- E793C9B02FD8AA13E21C31228ACCB08119643B749C898964B1746D46C3D4CBD2
- Parent SHA-256
- —
- Valid From (GMT)
- 2010.02.01
- Valid To (GMT)
- 2038.01.18
- AKI
- —
- SKI
- U3m/WqorSs9UgOHYm8Cd8rIDZss=
- Operated By
- —
- Constrained
- False
- Revocation
- —
- Salesforce ID
- 001o000000OrM8vAAF
Capabilities
- EV OIDs
- 1.3.6.1.4.1.6449.1.2.1.5.1; 2.23.140.1.1; 2.23.140.1.3
- Status of Root
- AppleIncludedGoogle ChromeIncludedMicrosoftIncludedMozillaIncluded
TLSTLS EVCode SigningS/MIME
CAA Identifiers
Recognized CAA issuer identifiers published by CCADB for this CA certificate.
USERTrust RSA Certification Authority
SKI 5379BF5AAA2B4ACF5480E1D89BC09DF2B20366CB
Audit
- Audit Firm
- BDO International Limited
- Firm Location
- United States
- Same as Parent
- false
Standard
- Audit URL
- Type
- WebTrust
- Statement
- 2025.06.17
- Period
- 2024.04.01 – 2025.03.31
NetSec
- Audit URL
- Type
- WebTrust
- Statement
- 2025.06.17
- Period
- 2024.04.01 – 2025.03.31
TLS BR
- Audit URL
- Type
- WebTrust
- Statement
- 2025.06.17
- Period
- 2024.04.01 – 2025.03.31
TLS EVG
- Audit URL
- Type
- WebTrust
- Statement
- 2025.06.17
- Period
- 2024.04.01 – 2025.03.31
Code Signing
- Audit URL
- Type
- WebTrust
- Statement
- 2025.06.17
- Period
- 2024.04.01 – 2025.03.31
S/MIME BR
- Audit URL
- Type
- WebTrust
- Statement
- 2025.06.17
- Period
- 2024.04.01 – 2025.03.31
Policy & Documentation
- CP URL
- —
- CP Effective
- —
- CPS URL
- —
- CPS Effective
- —
- CP/CPS Statement
- MD/AsciiDoc URL
- —
Policy OIDs
Certificate
X.509 certificatePolicies · cryptographic fact
No certificatePolicies extension in certificate
CCADB
EV OIDs for Root Cert · administrative declaration
1.3.6.1.4.1.6449.1.2.1.5.1CA/B EV TLS2.23.140.1.1CA/B EV CS2.23.140.1.3
Comparison
CCADB declares policy OIDs but certificate has none
Marked TLS EV Capable in CCADB but certificate has no policy OIDs
Chain Validation
No parent certificate in CCADB — chain lint requires issuer
Infrastructure
- CRL (Full)
- CRL (Parts)
- —
- ACME DV
- —
- ACME OV
- —
- ACME EV
- —
- Test (Valid)
- Test (Expired)
- Test (Revoked)
Certificate (PEM)