GeoTrust Root Certificates Licensing and Use

If you have bought a GeoTrust Root certificate under the Root Certificate License Agreement, which is available free of charge, please use the following:

—————————————————-

The Root Certificate can be downloaded under the Root Certificate License Agreement at no cost and you are not required to sign the agreement to make use of the Root Certificate(s).

If your company policy requires a signed agreement, you can get it by emailing a signed copy to dl-tss-root@symantec.com along with the information requested in the agreement. You will receive a counter signed copy of your records.

DISCLAIMER: ROOT CERTIFICATES, AND ANY UPDATES, ARE PROVIDED “AS-IS” WITH NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT OF THIRD PARTY RIGHTS.

Download GeoTrust Root Certificates (1-8)

Root 1 – Equifax Secure Certificate Authority
Description:
This root CA was the root used for all non-EV GeoTrust SSL Certificates up until July 22, 2010. This root will be required to validate GeoTrust SSL certificates for many years to come and may still be used as part of a cross certification to ensure legacy applications continue to trust GeoTrust certificates. This root must continue to be included in root stores by vendors. Vendors should not plan on removing support for this root until officially advised that the root is no longer needed to support certificates or CRL validation.

Country = US
Organization = Equifax
Serial Number: 35:DE:F4:CF
Validity Period: Sat Aug 22, 1998 to Wed Aug 22, 2018 (GMT)
Certificate Fingerprint (MD5): 67:CB:9D:C0:13:24:8A:82:9B:B2:17:1E:D1:1B:EC:D4
Certificate Fingerprint (SHA-1): D2:32:09:AD:23:D3:14:23:21:74:E4:0D:7F:9D:62:13:97:86:63:3A
Key Length: 1024
Digital Verification via HTTPS: https://ssltest15.bbtest.net

Download – Equifax Secure Certificate Authority (.pem file) Right Click, Save As

Root 2 – GeoTrust Global CA
Description: This root is the primary root used for all non-EV GeoTrust SSL certificates since July 22, 2010 and must be included in root stores.

Country = US
Organization = GeoTrust Inc.
Serial Number: 23456
Validity Period: Tue May 21, 2002 to Sat May 21, 2022 (GMT)
Certificate Fingerprint (MD5): F7:75:AB:29:FB:51:4E:B7:77:5E:FF:05:3C:99:8E:F5
Certificate Fingerprint (SHA-1): DE:28:F4:A4:FF:E5:B9:2F:A3:C5:03:D1:A3:49:A7:F9:96:2A:82:12
Key Length: 2048
Digital Verification via HTTPS: https://ssltest11.bbtest.net

Download PEM format – GeoTrust Global CA (.pem file) Right Click, Save As
Download Base-64 format – GeoTrust Global CA (.cer file)

Root 3 – GeoTrust Primary Certification Authority
Description: This root CA is the root used for GeoTrust Extended Validation SSL Certificates and must be included in root stores.

Country = US
Organization = GeoTrust Inc.
Serial Number: 18 ac b5 6a fd 69 b6 15 3a 63 6c af da fa c4 a1
Validity Period: Sun, November 26, 2006 5:00:00 PM to Wed, July 16, 2036 4:59:59 PM
Certificate Fingerprint (SHA-1): 32 3c 11 8e 1b f7 b8 b6 52 54 e2 e2 10 0d d6 02 90 37 f0 96
Key Length: 2048
Digital Verification via HTTPS: https://www.geotrust.com

Download – GeoTrust Primary CA (.pem file) Right Click, Save As

Root 4 – GeoTrust Primary Certification Authority – G2
Description: This root CA is not used present. It is intended for use in the future for SSL and Code Signing services needing an ECC encryption algorithm. It should be included in root stores.

Country = US
Organization = GeoTrust Inc.
Serial Number: 3cb2f4480a00e2feeb243b5e603ec36b
Validity Period: Sun, November 04, 2007 4:00:00 PM to Mon, January 18, 2038 3:59:59 PM
Certificate Fingerprint (SHA-1): 8d 17 84 d5 37 f3 03 7d ec 70 fe 57 8b 51 9a 99 e6 10 d7 b0
Digital Verification via HTTPS: https://ecc-test-valid.geotrust.com

Download – GeoTrust Primary CA – G2 (.pem file) Right Click, Save As

Root 5 – GeoTrust Primary Certification Authority – G3
Description: This root CA is not used today. It may use in the future for SSL and Code Signing services needing an SHA256 encryption algorithm. This root should be included in root stores.

Country = US
Organization = GeoTrust Inc.
Serial Number: 15 ac 6e 94 19 b2 79 4b 41 f6 27 a9 c3 18 0f 1f
Validity Period: Tue, April 01, 2008 4:00:00 PM to Tue, December 01, 2037 3:59:59 PM
Certificate Fingerprint (SHA-1): 03 9e ed b8 0b e7 a0 3c 69 53 89 3b 20 d2 d9 32 3a 4c 2a fd
Digital Verification via HTTPS: https://ssltest21.bbtest.net

Download – GeoTrust Primary CA – G3 (.pem file) Right Click, Save As

Root 6 – GeoTrust Universal CA
Description: This root is not used nowadays. This root contains a 4096-bit key size and may be used in the future. It is intended for use in the future for SSL certificates requiring SHA 256 encryption algorithm. This root should be included in root stores.

Country = US
Organization = GeoTrust Inc.
Serial Number: 01
Validity Period: Tue March 04, 2004 to Sun March 04, 2029 (GMT)
Certificate Fingerprint (MD5): 92:65:58:8B:A2:1A:31:72:73:68:5C:B4:A5:7A:07:48
Certificate Fingerprint (SHA-1): e6:21:f3:35:43:79:05:9a:4b:68:30:9d:8a:2f:74:22:15:87:ec:79
Key Length: 4096
Digital Verification via HTTPS: Not Available

Download – GeoTrust Universal CA (.pem file) Right Click, Save As

Root 7 – Equifax Secure eBusiness CA-1
Description:
This root is no longer used to sign new SSL certificates, but must be included in root stores to be able to validate valid certificates issued off this root.

 

Country = US
Organization = Equifax Secure Inc.
Serial Number: 04
Validity Period: Mon Jun 21, 1999 to Sun Jun 21, 2020 (GMT)
Certificate Fingerprint (MD5): 64:9C:EF:2E:44:FC:C6:8F:52:07:D0:51:73:8F:CB:3D
Certificate Fingerprint (SHA-1): da:40:18:8b:91:89:a3:ed:ee:ae:da:97:fe:2f:9d:f5:b7:d1:8a:41
Key Length: 1024
Digital Verification via HTTPS: https://ssltest17.bbtest.net

Download – Equifax Secure eBusiness CA-1 (.pem file) Right Click, Save As

Root 8 – Equifax Secure Global eBusiness CA-1
Description: This root is no longer used to sign new SSL certificates, but must be included in root stores to be able to validate valid certificates issued off this root.

Country = US
Organization = Equifax Secure Inc.
Serial Number: 01
Validity Period: Mon Jun 21, 1999 to Sun Jun 21, 2020 (GMT)
Certificate Fingerprint (MD5): 8F:5D:77:06:27:C4:98:3C:5B:93:78:E7:D7:7D:9B:CC
Certificate Fingerprint (SHA-1): 7e:78:4a:10:1c:82:65:cc:2d:e1:f1:6d:47:b4:40:ca:d9:0a:19:45
Key Length: 1024
Digital Verification via HTTPS: https://ssltest16.bbtest.net

Download – Equifax Secure Global eBusiness CA-1 (.pem file) Right Click, Save As

Root 9 – GeoTrust Global CA2
Description: It is a 2048 bit root which is not used to sign SSL Certificate in present days. It should be included in the root store.

Country = US
Organization = GeoTrust Inc.
Serial Number: 01
Validity Period: Tue March 04, 2004 to Sun March 04, 2019 (GMT)
Certificate Fingerprint (MD5): 0E:40:A7:6C:DE:3:5D:8F:D1:F:E4:D1:8D:F9:6C:A9
Certificate Fingerprint (SHA-1): a9:e9:78:08:14:37:58:88:f2:05:19:b0:6d:2b:0d:2b:60:16:90:7d
Key Length: 2048
Digital Verification via HTTPS: Not Available

Download – GeoTrust Global CA2 (.pem file) Right Click, Save As

Root 10 – GeoTrust Universal CA2
Description: Currently, This 4096 bit root is not used to sign SSL certificates and it should be included in the root store.

Country = US
Organization = GeoTrust Inc.
Serial Number: 01
Validity Period: Tue March 04, 2004 to Sun March 04, 2029 (GMT)
Certificate Fingerprint (MD5): 34:FC:B8:D0:36:DB:9E:14:B3:C2:F2:DB:8F:E4:94:C7
Certificate Fingerprint (SHA-1): 37:9a:19:7b:41:85:45:35:0c:a6:03:69:f3:3c:2e:af:47:4f:20:79
Key Length: 4096
Digital Verification via HTTPS: Not Available

Download – GeoTrust Universal CA2 (.pem file) Right Click, Save As

 

Download GeoTrust Application Specific Root Certificates (9-13)

Download and install these certificates only for specific applications

Root 11 – GeoTrust CA for Adobe

Country = US
Organization = GeoTrust Inc.
Serial Number: 3e 1c bd b5
Validity Period: 16 Jan 2004 to 15 Jan 2015
Certificate Fingerprint (SHA-1): dc:9b:f4:ad:a8:2e:c8:d9:97:d0:39:6e:a9:8f:01:84:85:5e:e5:ca
Key Length: 2048
Digital Verification via HTTPS: Not Available
Adobe Root CA: Download – Adobe Root CA (.pem file) Right Click, Save As

Download – GeoTrust CA for Adobe (.pem file) Right Click, Save As

Root 12 – GeoTrust Mobile Device Root – Unprivileged

Country = US
Organization = GeoTrust Inc.
Serial Number: 01
Validity Period: 29 Jul 2003 to 29 Jul 29 2023
Certificate Fingerprint (SHA-1): b2:a4:4c:4d:48:fd:95:16:b4:63:90:b9:f6:21:28:9d:a0:f3:a3:65
Key Length: 2048
Digital Verification via HTTPS: Not Available

Download – GeoTrust Mobile Device Root – Unprivileged (.pem file) Right Click, Save As

Root 13 – GeoTrust Mobile Device Root – Privileged

Country = US
Organization = GeoTrust Inc.
Serial Number: 01
Validity Period: 29 Jul 2003 to 29 Jul 29 2023
Certificate Fingerprint (SHA-1): 53:17:00:a6:14:93:52:ac:4b:ab:b4:e0:be:d8:93:92:6c:55:15:e9
Key Length: 2048
Digital Verification via HTTPS: Not Available

Download – GeoTrust Mobile Device Root – Privileged (.pem file) Right Click, Save As

Root 14 – GeoTrust CA for UTI

Country = US
Organization = Unified Testing Initiative (UTI)
Serial Number: 01
Validity Period: 23 Jan 2004 to 23 Jan 2024
Certificate Fingerprint (SHA-1): 88:7a:79:40:6a:2e:61:4f:b6:5f:a6:25:5e:14:11:e4:e1:3a:76:0a
Key Length: 2048
Digital Verification via HTTPS: Not Available

Download – GeoTrust CA for UTI (.pem file) Right Click, Save As

Root 15 – GeoTrust True Credentials CA 2

Country =  US
Organization = GeoTrust Inc.
Serial Number: 1b
Validity Period: Mon Oct 7, 2002 to Sun Jun 21, 2020 (GMT)
Certificate Fingerprint (MD5): 85:8E:B3:54:F7:AC:18:A3:E7:3D:90:9E:02:90:4D:3D
Certificate Fingerprint (SHA-1): e5:f6:2a:23:d1:7d:5b:a1:df:15:ca:98:53:6a:2a:6d:70:cc:93:5f
Key Length: 1024
Digital Verification via HTTPS: Not Available

Download – GeoTrust True Credentials CA 2 (.pem file) Right Click, Save As

Retired Roots
The following roots have been retired and need no longer be distributed by vendors

Root 1 – Equifax Secure eBusiness CA-2

Country = US
Organization = GeoTrust Inc.
Serial Number: 1b
Validity Period: Mon Oct 7, 2002 to Sun Jun 21, 2020 (GMT)
Certificate Fingerprint (MD5): 85:8E:B3:54:F7:AC:18:A3:E7:3D:90:9E:02:90:4D:3D
Certificate Fingerprint (SHA-1): 39:4f:f6:85:0b:06:be:52:e5:18:56:cc:10:e1:80:e8:82:b3:85:cc
Key Length: 1024
Digital Verification via HTTPS: Not Available

Download – Equifax Secure eBusiness CA-2 (.pem file) Right Click, Save As

Choose your SSL from the world's most trusted brands

Follow Us

Positive SSL