Root Certificates

GlobalSign Root Certificates

Jul 15, 2025

This support article contains the list of Root Certificates by Product Type for the following products: AlphaSSL, DomainSSL, OrganizationSSL, ExtendedSSL, CloudSSL, AATL, CodeSign, EV CodeSign, PersonalSign. The Root Certificates are grouped into different has algorithms: SHA-256 RSA, SHA-384 ECC and SHA-1 RSA (Legacy).

Read More

Root & Intermediate Certificate Bundles

Jul 7, 2025

Some Apache and Java based applications require the Root & Intermediate certificates to be bundled in a single file. You can create a certificate bundle by opening a plain text editor (notepad, gedit, etc) and pasting in the text of the root certificate and the text of the intermediate certificate. The order they go in depends on the type of server you are running. Nginx for example concatenates all certificates in one file beginning with the server certificate.

Read More

Trusted Root Intermediate Certificates

Mar 11, 2024

This support article is all about Trusted Root Intermediate Certificates, a select service with strict requirements. PKI hierarchies allow you to control the chain of trust in your ecosystem, whether you’re implementing client authentication within an enterprise or deploying secure device identities within a supply chain. GlobalSign supports multiple hierarchy options for more flexible trust management and isolation of control, including dedicated or shared and public or private models. GlobalSign Root Certificates are already distributed in all operating systems, browsers, and mobile devices, meaning that all certificates issued from hierarchies beneath these roots are transparently trusted. For closed ecosystems, where public trust isn’t wanted or allowed, private and dedicated customer roots and intermediates are issued.

Read More

GlobalSign Root Ubiquity

Mar 18, 2025

In today’s interconnected world, your online solutions need to interact seamlessly with customers who connect to your web server, read your emails, run your code, or trust your electronic documents. As a leading WebTrust-accredited Certification Authority, GlobalSign maintains its own Root Embedding program. GlobalSign’s Root Certifi­cates can be found in every popular machine, device, application and platform that uses the trust of Public Key Infrastructure.

Read More

GlobalSign SSL Products Intermediate and Root Migration

Jul 19, 2024

As of May 2019, GlobalSign migrated some of its SSL/TLS Products over to Root R3 and Root R5 as part of our CA life cycle management process and to address SHA-1 Root concerns.

Read More

GlobalSign Cross Certificates

Apr 28, 2025

Cross Certificates create alternate trust paths for Certificates. GlobalSign offers Cross Certificates to chain to alternate Root Certificates. This may be useful for customers needing to support legacy devices that only have older, more ubiquitous roots embedded. In addition, GlobalSign offers Code Signing Cross Certificates that chain to the Microsoft Trust Store.

Read More

Remove Superfish Root Certificate

Dec 6, 2022

Superfish is an Adware application pre-installed on some Lenovo devices that leaves users vulnerable to man-in-the-middle attacks through the presence of a non-standard root certificate with a compromised private key. Removal of this certificate is recommended to mitigate its potential use for MITM attacks.

Read More

Secure Information Access - Root Certificates

Feb 4, 2025

Root Certificate Requirement for Accessing Information Securely on a Secure Server. Browsers “embed” a certificate in them so that the holders of the private keys associated with that certificate can identify websites on the internet, that certificate is called a root certificate. The root certificates of GlobalSign are trusted by 99.99% of all browsers so when the certificates that they issue to websites are used users experience a smooth experience with no security alerts.

Read More

Update GlobalSign Root Certificate - Windows XP & Windows 2000

Feb 19, 2024

This support article will guide you on how to update GlobalSign Root Certificate on Windows XP and Windows 2000. This is a manual fix for Windows 2000, XP, XP Embedded.

Read More

GlobalSign Qualified Production and Sample Certificates

Apr 16, 2025

This support article lists down the Qualified Production Certificate and Qualified Sample Certificate. Qualified certificates can only be issued by a Qualified Trust Service Provider (QTSP) recognized under eIDAS. GlobalSign is recognized across all EU and EEA countries as a QTSP and has undergone the appropriate eIDAS conformity assessments in order to be able to provide qualified certificates for website authentication and electronic seals. All certificates, signatures, and seals are compliant with EU regulations and local signing standards.

Read More