GlobalSign Root Certificates

Overview

GlobalSign’s root certificates are some of the oldest and most trusted root certificates in the PKI ecosystem. Since our inception, we have generated future-proof root certificates that exceed current industry best practices. We work diligently to protect the security of our root certificates, providing end users trust anchors that secure all types of organization and individual authentication.

Root Certificates by Product Type

Product CSR Key Type Default Hash Algorithm SHA-1
RSA
(Legacy)
AlphaSSL RSA SHA-256 R1
DomainSSL RSA  & ECC SHA-256 R3

OrganizationSSL (Retail/Partner, MSSL)

RSA SHA-256 R3
ECC SHA-384 R5
ExtendedSSL (Retail/Partner) RSA & ECC SHA-256 R3
ExtendedSSL (MSSL) RSA SHA-256

R3

ECC SHA-384 R5
CloudSSL RSA SHA-256 R3
AATL RSA SHA-256 R3
Code Signing RSA SHA-256 R3
EV Code Signing RSA SHA-256 R3
PersonalSign RSA SHA-256 R3
Qualified RSA SHA-384 R6
Timestamping RSA SHA-384 R6

RSA Root Certificates

R1 GlobalSign Root Certificate

GlobalSign Root R1

SHA1 • RSA • 2048

Valid until: 28 January 2028

Serial #: 04:00:00:00:00:01:15:4b:5a:c3:94

Thumbprint: b1:bc:96:8b:d4:f4:9d:62:2a:a8:9a:81:f2:15:01:52:a4:1d:82:9c

Root R1 was GlobalSign’s first root certificate embedded in browsers (back in 1999, Netscape and Windows 98), making Root R1 GlobalSign’s oldest and most ubiquitous root certificate. The original use case was for personal certificates, but this quickly expanded as GlobalSign’s business and expertise broadened. Due to its hash algorithm, GlobalSign will begin scaling back Root R1 use.

Does my browser trust this certificate?

Download Certificate (Binary/DER Encoded) View in Base64

R3 GlobalSign Root Certificate

GlobalSign Root R3
SHA256 • RSA • 2048

Valid until: 18 March 2029
Serial #: 04:00:00:00:00:01:21:58:53:08:a2
Thumbprint: d6:9b:56:11:48:f0:1c:77:c5:45:78:c1:09:26:df:5b:85:69:76:ad

Root R3 is GlobalSign’s second oldest root, and as ubiquitous as Root R1. Its hash algorithm is more secure than R1, and therefore all of GlobalSign’s business (TLS, code signing, timestamping document signing) chains to this root.

Does my browser trust this certificate?

Download Certificate (Binary/DER Encoded) View in Base64

R6 GlobalSign Root Certificate

GlobalSign Root R6

SHA384 • RSA • 4096

Valid until: 09 December 2034

Serial #: 45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Thumbprint: 80:94:64:0e:b5:a7:a1:ca:11:9c:1f:dd:d5:9f:81:02:63:a7:fb:d1

Root R6 is GlobalSign’s most secure, robust RSA root. At SHA-384 with a 4096-bit key length, it is poised to take on most of GlobalSign’s core business, especially as Root R3 retires. It has been embedded in every major browser and security trust list.

Does my browser trust this certificate? 

Download Certificate (Binary/DER Encoded) View in Base64

R46 GlobalSign Root Certificate

GlobalSign Root R46

SHA384 • RSA • 4096

Valid until: 20 March 2046

Serial #: 11:d2:bb:b9:d7:23:18:9e:40:5f:0a:9d:2d:d0:df:25:67:d1

Thumbprint: 53:a2:b0:4b:ca:6b:d6:45:e6:39:8a:8e:c4:0d:d2:bf:77:c3:a2:90

Root R46 is GlobalSign’s newest RSA root, and was submitted to the Mozilla Root Store late 2019. It will serve to replace Root R6 when R6 expires.

Does my browser trust this certificate? 

Download Certificate (Binary/DER Encoded) View in Base64

ECC Root Certificates

GlobalSign Root R5 Certificate

GlobalSign ECC Root R5

SHA384 • ECC • 384

Valid until: 19 January 2038

Serial #: 60:59:49:e0:26:2e:bb:55:f9:0a:77:8a:71:f9:4a:d8:6c

Thumbprint: 1f:24:c6:30:cd:a4:18:ef:20:69:ff:ad:4f:dd:5f:46:3a:1b:69:aa

Root R5 is GlobalSign’s first ECC root, providing customers a pure ECC hierarchy. It features a SHA-384 hash with a 384-bit key length, making it one of GlobalSign’s most secure roots in the PKI ecosystem. It has been embedded in every major browser and security trust list.

Does my browser trust this certificate?

Download Certificate (Binary/DER Encoded) View in Base64

E46 GlobalSign Root Certificate

GlobalSign Root E46

SHA384 • ECC • 384

Valid until: 20 March 2046

Serial #: 11:d2:bb:ba:33:6e:d4:bc:e6:24:68:c5:0d:84:1d:98:e8:43

Thumbprint: 39:b4:6c:d5:fe:80:06:eb:e2:2f:4a:bb:08:33:a0:af:db:b9:dd:84

Root E46 is GlobalSign’s newest ECC root, and was submitted to the Mozilla Root Store late 2019. It will serve to replace Root R5 when R5 expires.

Does my browser trust this certificate?

Download Certificate (Binary/DER Encoded) View in Base64

Non-TLS Root Certificates

Client Authentication Root E45 Certificate

GlobalSign Client Authentication Root E45 
SHA384 • ECC • 384 
Valid until: March 18 2045 
Serial #: 76:53:fe:ba:b2:1d:d8:27:e9:69:16:a2:eb:81:be:58
Thumbprint: a2:be:e4:ad:03:27:13:ad:ce:0a:0e:9b:19:b6:b8:5f:c2:4e:ca:8d

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Client Authentication Root R45

GlobalSign Client Authentication Root R45 
SHA384 • RSA • 4096 
Valid until: March 18 2045 
Serial #: 76:53:fe:b9:f5:c7:db:ea:8b:a4:78:d4:3e:3d:6b:f6
Thumbprint: dc:77:5c:1c:87:4f:1b:bf:51:09:9f:6f:b1:29:db:99:ff:08:eb:52

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Code Signing Root E45

GlobalSign Code Signing Root E45 
SHA384 • ECC • 384 
Valid until: March 18 2045 
Serial #: 76:53:fe:ae:18:26:43:6f:69:f5:1c:c2:77:16:f2:5e
Thumbprint: 79:aa:50:5e:dd:09:b3:21:e3:6d:57:91:0a:5d:f5:a9:fb:85:cc:57

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Code Signing Root R45

GlobalSign Code Signing Root R45 
SHA384 • RSA • 4096 
Valid until: March 18 2045 
Serial #: 76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Thumbprint: 4e:fc:31:46:0c:61:9e:ca:e5:9c:1b:ce:2c:00:80:36:d9:4c:84:b8

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Document Signing Root E45

GlobalSign Document Signing Root E45 
SHA384 • ECC • 384 
Valid until: March 18 2045 
Serial #: 76:53:fe:b0:af:4b:75:90:a2:1a:e4:a2:d5:f2:76:b5
Thumbprint: ce:71:31:5d:c0:98:61:1f:60:8c:6c:de:cc:ed:c3:5d:18:d0:85:48

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Document Signing Root R45

GlobalSign Document Signing Root R45 
SHA384 • RSA • 4096 
Valid until: March 18 2045 
Serial #: 76:53:fe:b0:4c:a0:d5:71:f2:14:b3:8e:2c:7f:17:41
Thumbprint: 4f:79:df:63:55:10:27:69:69:e8:23:c4:b8:7f:79:3b:97:48:d3:ea

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign IoT Root E60

GlobalSign IoT Root E60 
SHA384 • ECC • 384 
Valid until: March 18 2060 
Serial #: 76:53:fe:b5:6a:c8:ee:4e:8a:c6:fe:5e:9e:38:f5:eb
Thumbprint: 2a:5e:c5:2b:75:1d:85:65:51:2d:a7:f7:de:93:fd:95:f3:d4:18:b6

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign IoT Root R60

GlobalSign IoT Root R60 
SHA384 • RSA • 4096 
Valid until: March 18 2060 
Serial #: 76:53:fe:b3:ea:3b:ca:64:6a:eb:5d:6c:7d:ce:fb:b6
Thumbprint: 48:46:37:05:74:8c:cf:3e:60:87:50:3c:60:2b:d0:ee:c7:c1:dd:cf

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Secure Mail Root E45

GlobalSign Secure Mail Root E45 
SHA384 • ECC • 384 
Valid until: March 18 2045 
Serial #: 76:53:fe:aa:27:1d:95:46:5d:d6:f1:9e:e5:b8:90:0a
Thumbprint: 18:2e:1f:32:4f:89:df:be:fe:88:89:f0:93:c2:c4:a0:2b:67:75:21

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Secure Mail Root R45

GlobalSign Secure Mail Root R45 
SHA384 • RSA • 4096 
Valid until: March 18 2045 
Serial #: 76:53:fe:a8:4c:50:ab:9f:8d:32:b5:1d:03:8f:57:dc
Thumbprint: 76:18:d1:f3:80:24:3d:52:40:c6:11:6a:ad:57:77:09:7d:81:30:a0

Download Certificate (Binary/DER Encoded) View in Base64

GlobalSign Timestamping Root R45

GlobalSign Timestamping Root R45 
SHA384 • RSA • 4096 
Valid until: March 18 2045 
Serial #: 76:53:fe:b9:3d:d9:e7:e9:26:32:ac:d6:0a:be:ac:38
Thumbprint: 13:9b:1c:71:2f:d1:7c:3c:a5:da:6e:57:01:af:ba:01:58:f9:d4:5d

Download Certificate (Binary/DER Encoded) View in Base64

Related Articles

GlobalSign System Alerts

View recent system alerts.

View Alerts

Certificate Inventory Tool

Scan your endpoints to locate all of your Certificates.

Log In / Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.