Menu

IntranetSSL Root & Intermediate Certificates

Apr 11, 2025

IntranetSSL Root & Intermediate Certificates

Introduction

IntranetSSL certificates are issued under GlobalSign Root Certificates that are not publicly trusted. This allows IntranetSSL to support features that are normally prohibited under the industry and CA/Browser Forum guidelines for public trust certificates. Specifically, IntranetSSL supports the issuance of certificates:

  • With Internal Server Names and reserved IP addresses
  • Using the SHA-1 signing algorithm for legacy application support
  • With up to 5 years of validity vs. the industry 13-month maximum
     

All of our IntranetSSL certificates can be issued via the ACME protocol.


​IntranetSSL comprises 3 distinct hierarchies:

  1. SHA-1: For legacy applications that need SHA-1 SSL certificates and SHA-1-signed OCSP responses.
  2. SHA-256: For typical certificate use.
  3. ECC P-256: For those that need shorter keys with stronger security, the root, intermediate, CRL, and OCSP responses are all signed with ECC.

Atlas Non-Public Hierarchies

GlobalSign Atlas NPR43 CA 2023

GlobalSign Atlas NPR43 CA 2023
SHA256 • RSA • 2048
Chaining Root: GlobalSign Non-Public Root R43

Valid until: 21 March 2033
Serial #: 7e592cfcaa0615496e2f74804afd9d12
Thumbprint: 1003cc06032f1430ac31c7d6015ba0b17f62dd3a

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Atlas Non-Public Non-Validated RSA ICA 2023

Note: This hierarchy is designed for use cases that do not enforce domain
validation.

GlobalSign Atlas Non-Public Non-Validated RSA ICA 2023
SHA256 • RSA • 2048
Chaining Root: GlobalSign Non-Public Root R43

Valid until: 16 May 2033
Serial #: 7eb65a57c0eb93c33c8ea15be98f862a
Thumbprint: 3d7c1d86466d692f75b60ea138d93080cab2de04

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public Root R43

GlobalSign Non-Public Root R43
SHA256 • RSA • 2048

Valid until: 21 March 2043
Serial #: 7e592ce6d315a4d5b8ea86c187df94b1
Thumbprint: c77a5caab5af0a484ab4b412bfeb71b8aefedbb1

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public ECC CA 2018

GlobalSign Non-Public ECC CA 2018
SHA256 • ECC • 256
Chaining Root: GlobalSign Non-Public Root CA - R3

Valid until: 14 August 2033
Serial #: 01ee5f159486426e87230dbc43
Thumbprint: 7f9f45213668cea0316b8279ce2363e10bc94493

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public Root CA - R3

GlobalSign Non-Public Root CA - R3
SHA256 • ECC • 256

Valid until: 18 January 2038
Serial #: 46:74:37:7c:0f:ba:34:f6:f1:c3:dc:b7:5d:3f
Thumbprint: 7f:77:ad:e4:17:9a:58:78:22:bb:08:57:2e:7e:96:0f:9f:bd:28:1b

Download Certificate (Binary/DER Encoded) View in Base64

GCC Non-Public Hierarchies

Globalsign GCC Non-Public Root R43

Note: This hierarchy is replacing the GlobalSign Non-Public SHA256 CA - G3 hierarchy as of May 26, 2025.

GlobalSign GCC Non-Public Root R43
SHA256 • RSA • 256
Chaining Root: GlobalSign Non-Public Root R43

Valid until: 19 March 2040
Serial #: 0083149e8a57eacc2e131ebf5f89166abe
Thumbprint: f087412f15425dea5285cfa09e0c2c67f63cc833

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public SHA1 CA - G3

Note: This hierarchy is being deprecated.

GlobalSign Non-Public SHA1 CA - G3
SHA1 • RSA • 2048
Chaining Root: GlobalSign Non-Public Root CA - R1

Valid until: 31 December 2029
Serial #: ‎46:74:37:7a:94:89:55:dc:52:50:2b:14:54:c2
Thumbprint: e9:ed:c5:c6:a6:2b:d1:f1:cb:48:12:8a:2f:dc:68:f3:e1:46:f0:ae

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public Root CA - R1

Note: This hierarchy is being deprecated.

GlobalSign Non-Public Root CA - R1
SHA1 • RSA • 2048

Valid until: 31 December 2029
Serial #: ‎46:74:37:78:93:76:ad:23:01:cd:f9:ba:9e:1d
Thumbprint: ‎16:d3:f4:45:5a:4c:82:ce:c4:f4:57:d0:3e:0f:2d:d5:f5:41:7a:99

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public SHA256 CA - G3

Note: This hierarchy is being deprecated.

GlobalSign Non-Public SHA256 CA - G3
SHA256 • RSA • 2048
Chaining Root: GlobalSign Non-Public Root CA - R2

Valid until: 31 December 2029
Serial #: ‎46:74:37:7b:90:a8:a5:de:a3:c9:04:aa:8c:d7
Thumbprint: ‎4e:4a:f1:b9:94:91:3e:18:c4:a8:ac:de:65:73:35:b5:d1:37:9d:30
 

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public Root CA - R2

GlobalSign Non-Public Root CA - R2
SHA256 • RSA • 2048

Valid until: 31 December 2029
Serial #: ‎46:74:37:7b:15:26:d9:15:1c:7f:42:fe:9f:18
Thumbprint: ‎00:76:b1:12:0a:eb:73:99:39:84:34:e4:ff:18:07:07:f6:b1:ef:33

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public ECC256 CA - G3

GlobalSign Non-Public ECC256 CA - G3
SHA256 • ECC • 256
Chaining Root: GlobalSign Non-Public Root CA - R3

Valid until: 29 April 2030
Serial #: ‎46:74:37:7d:82:81:ef:51:f2:2e:81:28:15:b0
Thumbprint: ‎06:48:b7:dc:f3:98:de:99:a4:57:8e:ba:42:0d:4f:70:7a:4b:b7:00

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Non-Public Root CA - R3

GlobalSign Non-Public Root CA - R3
SHA256 • ECC • 256

Valid until: 18 January 2038
Serial #: ‎46:74:37:7c:0f:ba:34:f6:f1:c3:dc:b7:5d:3f
Thumbprint: ‎7f:77:ad:e4:17:9a:58:78:22:bb:08:57:2e:7e:96:0f:9f:bd:28:1b

Download Certificate (Binary/DER Encoded) View in Base64

Related Articles

PersonalSign Intermediate Certificates

Dec 16, 2019, 3:25 PM

Intermediate Certificates help complete a "Chain of Trust" from your SSL or client certificate to GlobalSign's root certificate. As a PersonalSign customer, intermediate certificates are already bundled in the .pfx (PKCS#12) you downloaded after completing your purchase. No action should be required. If you did a custom order where you provided a CSR, you may need to download a PersonalSign intermediate certificate listed below.

Read More

Code Signing (Standard & EV) Intermediate Certificates

Mar 9, 2020, 2:04 PM

Intermediate Certificates help complete a "Chain of Trust" from your SSL or client certificate to GlobalSign's root certificate. The Standard Code Signing Certificates and EV Code Signing Certificates should automatically install the intermediate certificate on the USB token. If this does not happen you can use the links below to download the Standard Code Signing Intermediate or the EV Code Signing Intermediate.

Read More

Administration Intermediate Certificate

Mar 9, 2020, 2:32 PM

This support article contains the details of the Administration Intermediate Certificate. Intermediate Certificates help complete a "Chain of Trust" from your SSL or client certificate to GlobalSign's root certificate.

Read More

GlobalSign System Alerts

View recent system alerts.

View Alerts

Atlas Discovery

Scan your endpoints to locate all of your Certificates.

Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.

Contact Support