← All China Financial Certification Authority (CFCA) certificates
Root Certificate

CFCA EV ROOT

China Financial Certification Authority (CFCA)
Browser Trust
Apple
Apple
Included
CCADB status only
Chrome
Chrome
Included
Not directly listed
Microsoft
Microsoft
Included
Not directly listed
Mozilla
Mozilla
Included
Not directly listed
Trust Bits (root)
Server AuthenticationClient AuthenticationSecure EmailTime Stamping
Certificate Details
Record Type
Root Certificate
SHA-256
5CC3D78E4E1D5E45547A04E6873E64F90CF9536D1CCC2EF800F355C4C5FD70FD
Parent SHA-256
Valid From (GMT)
2012.08.08
Valid To (GMT)
2029.12.31
AKI
4/4t/SjQC7W6tqLEvwaqBYyT+y8=
SKI
4/4t/SjQC7W6tqLEvwaqBYyT+y8=
Operated By
Constrained
False
Revocation
Salesforce ID
001o000000TNZoiAAH
Capabilities
EV OIDs
2.16.156.112554.3; 2.23.140.1.1
Status of Root
Apple
Included
Google Chrome
Included
Microsoft
Included
Mozilla
Included
TLSTLS EVCode SigningS/MIME
CAA Identifiers
Recognized CAA issuer identifiers published by CCADB for this CA certificate.
Not disclosed in CCADB
No recognized CAA issuer identifier was found for this CA certificate. CAs are expected to disclose CAA identifiers to CCADB when applicable.
Audit
Audit Firm
Anthony Kam & Associates Ltd.
Firm Location
China
Same as Parent
false
Standard
Audit URL
Type
WebTrust
Statement
2025.10.21
Period
2024.08.01 – 2025.07.31
NetSec
Audit URL
Type
WebTrust
Statement
2025.10.21
Period
2024.08.01 – 2025.07.31
TLS BR
Audit URL
Type
WebTrust
Statement
2025.10.21
Period
2024.08.01 – 2025.07.31
TLS EVG
Audit URL
Type
WebTrust
Statement
2025.10.21
Period
2024.08.01 – 2025.07.31
Policy & Documentation
CP URL
CP Effective
CPS URL
CPS Effective
CP/CPS Statement
MD/AsciiDoc URL
Policy OIDs
Certificate X.509 certificatePolicies · cryptographic fact
No certificatePolicies extension in certificate
CCADB EV OIDs for Root Cert · administrative declaration
2.16.156.112554.3CA/B EV TLS2.23.140.1.1
Comparison
CCADB declares policy OIDs but certificate has none
Marked TLS EV Capable in CCADB but certificate has no policy OIDs
Chain Validation
No parent certificate in CCADB — chain lint requires issuer
Infrastructure
CRL (Full)
CRL (Parts)
ACME DV
ACME OV
ACME EV
Test (Valid)
Test (Expired)
Test (Revoked)
Certificate (PEM)

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action