Root Certificates

GlobalSign Root Certificates

Nov 21, 2024

This support article contains the list of Root Certificates by Product Type for the following products: AlphaSSL, DomainSSL, OrganizationSSL, ExtendedSSL, CloudSSL, AATL, CodeSign, EV CodeSign, PersonalSign. The Root Certificates are grouped into different has algorithms: SHA-256 RSA, SHA-384 ECC and SHA-1 RSA (Legacy).

Read More

Root & Intermediate Certificate Bundles

Dec 6, 2022

Some Apache and Java based applications require the Root & Intermediate certificates to be bundled in a single file. You can create a certificate bundle by opening a plain text editor (notepad, gedit, etc) and pasting in the text of the root certificate and the text of the intermediate certificate. The order they go in depends on the type of server you are running. Nginx for example concatenates all certificates in one file beginning with the server certificate.

Read More

Trusted Root Intermediate Certificates

Mar 11, 2024

This support article is all about Trusted Root Intermediate Certificates, a select service with strict requirements. PKI hierarchies allow you to control the chain of trust in your ecosystem, whether you’re implementing client authentication within an enterprise or deploying secure device identities within a supply chain. GlobalSign supports multiple hierarchy options for more flexible trust management and isolation of control, including dedicated or shared and public or private models. GlobalSign Root Certificates are already distributed in all operating systems, browsers, and mobile devices, meaning that all certificates issued from hierarchies beneath these roots are transparently trusted. For closed ecosystems, where public trust isn’t wanted or allowed, private and dedicated customer roots and intermediates are issued.

Read More

GlobalSign Root Ubiquity

Mar 6, 2024

In today’s interconnected world, your online solutions need to interact seamlessly with customers who connect to your web server, read your emails, run your code, or trust your electronic documents. As a leading WebTrust-accredited Certification Authority, GlobalSign maintains its own Root Embedding program. GlobalSign’s Root Certifi­cates can be found in every popular machine, device, application and platform that uses the trust of Public Key Infrastructure.

Read More

GlobalSign SSL Products Intermediate and Root Migration

Jul 19, 2024

As of May 2019, GlobalSign migrated some of its SSL/TLS Products over to Root R3 and Root R5 as part of our CA life cycle management process and to address SHA-1 Root concerns.

Read More

GlobalSign Cross Certificates

Aug 13, 2024

Cross Certificates create alternate trust paths for Certificates. GlobalSign offers Cross Certificates to chain to alternate Root Certificates. This may be useful for customers needing to support legacy devices that only have older, more ubiquitous roots embedded. In addition, GlobalSign offers Code Signing Cross Certificates that chain to the Microsoft Trust Store.

Read More

Remove Superfish Root Certificate

Dec 6, 2022

Superfish is an Adware application pre-installed on some Lenovo devices that leaves users vulnerable to man-in-the-middle attacks through the presence of a non-standard root certificate with a compromised private key. Removal of this certificate is recommended to mitigate its potential use for MITM attacks.

Read More

Secure Information Access - Root Certificates

Jan 20, 2021

Root Certificate Requirement for Accessing Information Securely on a Secure Server. Browsers “embed” a certificate in them so that the holders of the private keys associated with that certificate can identify websites on the internet, that certificate is called a root certificate. The root certificates of GlobalSign are trusted by 99.99% of all browsers so when the certificates that they issue to websites are used users experience a smooth experience with no security alerts.

Read More

Update GlobalSign Root Certificate - Windows XP & Windows 2000

Feb 19, 2024

This support article will guide you on how to update GlobalSign Root Certificate on Windows XP and Windows 2000. This is a manual fix for Windows 2000, XP, XP Embedded.

Read More

Removing the R3 signed by R1 Cross Certificate

Feb 29, 2024

When viewing the TLS Certificate hierarchy for sites secured with a GlobalSign TLS Certificate under our Root R3, some users may observe a 4-level certificate chain back to the SHA-1 GlobalSign Root R1. This article discusses how this happens, why it’s not a security risk that the TLS Certificate appears to be issued under the SHA-1 GlobalSign Root R1, and how to temporarily resolve the misleading certificate chain displayed by the Microsoft Certificate Viewer.

Read More