📋 chkcert — cacerts ☕ cacerts

Generated: 2026-06-02 17:59 UTC | Host: check-certificat | Source: C:\Tools\jdk-25.0.3+9\lib\security\cacerts | 144 certificate(s) | cacerts truststore 📅 ref 2026-06-02

Certificates

#	Label / Alias	Subject	Issuer	Serial	Key	Signature Algorithm	CA	Key Usage	Extended Key Usage	Subject Alternative Name	Basic Constraints
1	c=de,o=atos,cn=atos_trustedroot_2011	C=DE,O=Atos,CN=Atos TrustedRoot 2011	C=DE,O=Atos,CN=Atos TrustedRoot 2011	`5c33cb622c5fb332`	2048-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
2	c=de,o=atos,cn=atos_trustedroot_root_ca_ecc_tls_2021	C=DE,O=Atos,CN=Atos TrustedRoot Root CA ECC TLS 2021	C=DE,O=Atos,CN=Atos TrustedRoot Root CA ECC TLS 2021	`3d983ba6663d9063f77e26573804ef00`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
3	c=de,o=atos,cn=atos_trustedroot_root_ca_rsa_tls_2021	C=DE,O=Atos,CN=Atos TrustedRoot Root CA RSA TLS 2021	C=DE,O=Atos,CN=Atos TrustedRoot Root CA RSA TLS 2021	`53d5cfe619930bfb2b0512d8c22aa2a4`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
4	c=es,o=accv,ou=pkiaccv,cn=accvraiz1	C=ES,O=ACCV,OU=PKIACCV,CN=ACCVRAIZ1	C=ES,O=ACCV,OU=PKIACCV,CN=ACCVRAIZ1	`5ec3b7a6437fa4e0`	4096-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	Email accv@accv.es	present CA: True
5	cn=ac_raiz_fnmt-rcm_servidores_seguros,ou=ceres,o=fnmt-rcm,c=es	CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS,2.5.4.97=VATES-Q2826004J,OU=Ceres,O=FNMT-RCM,C=ES	CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS,2.5.4.97=VATES-Q2826004J,OU=Ceres,O=FNMT-RCM,C=ES	`62f6326ce5c4e3685c1b62dd9c2e9d95`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
6	cn=actalis_authentication_root_ca,o=actalis_s.p.a./03358520967,l=milan,c=it	CN=Actalis Authentication Root CA,O=Actalis S.p.A./03358520967,L=Milan,C=IT	CN=Actalis Authentication Root CA,O=Actalis S.p.A./03358520967,L=Milan,C=IT	`570a119742c4e3cc`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
7	cn=affirmtrust_commercial,o=affirmtrust,c=us	CN=AffirmTrust Commercial,O=AffirmTrust,C=US	CN=AffirmTrust Commercial,O=AffirmTrust,C=US	`7777062726a9b17c`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
8	cn=affirmtrust_networking,o=affirmtrust,c=us	CN=AffirmTrust Networking,O=AffirmTrust,C=US	CN=AffirmTrust Networking,O=AffirmTrust,C=US	`7c4f04391cd4992d`	2048-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
9	cn=affirmtrust_premium,o=affirmtrust,c=us	CN=AffirmTrust Premium,O=AffirmTrust,C=US	CN=AffirmTrust Premium,O=AffirmTrust,C=US	`6d8c1446b1a60aee`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
10	cn=affirmtrust_premium_ecc,o=affirmtrust,c=us	CN=AffirmTrust Premium ECC,O=AffirmTrust,C=US	CN=AffirmTrust Premium ECC,O=AffirmTrust,C=US	`7497258ac73f7a54`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
11	cn=amazon_root_ca_1,o=amazon,c=us	CN=Amazon Root CA 1,O=Amazon,C=US	CN=Amazon Root CA 1,O=Amazon,C=US	`66c9fcf99bf8c0a39e2f0788a43e696365bca`	2048-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
12	cn=amazon_root_ca_2,o=amazon,c=us	CN=Amazon Root CA 2,O=Amazon,C=US	CN=Amazon Root CA 2,O=Amazon,C=US	`66c9fd29635869f0a0fe58678f85b26bb8a37`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
13	cn=amazon_root_ca_3,o=amazon,c=us	CN=Amazon Root CA 3,O=Amazon,C=US	CN=Amazon Root CA 3,O=Amazon,C=US	`66c9fd5749736663f3b0b9ad9e89e7603f24a`	⚠ 256-bit EC	ecdsa-with-SHA256	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
14	cn=amazon_root_ca_4,o=amazon,c=us	CN=Amazon Root CA 4,O=Amazon,C=US	CN=Amazon Root CA 4,O=Amazon,C=US	`66c9fd7c1bb104c2943e5717b7b2cc81ac10e`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
15	cn=anf_secure_server_root_ca,ou=anf_ca_raiz,o=anf_autoridad_de_certificacion,c=es	CN=ANF Secure Server Root CA,OU=ANF CA Raiz,O=ANF Autoridad de Certificacion,C=ES,2.5.4.5=G63287510	CN=ANF Secure Server Root CA,OU=ANF CA Raiz,O=ANF Autoridad de Certificacion,C=ES,2.5.4.5=G63287510	`dd3e3bc6cf96bb1`	4096-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
16	cn=autoridad_de_certificacion_firmaprofesional_cif_a62634068,c=es	CN=Autoridad de Certificacion Firmaprofesional CIF A62634068,C=ES	CN=Autoridad de Certificacion Firmaprofesional CIF A62634068,C=ES	`1b70e9d2ffae6c71`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True PathLength: 1
17	cn=bjca_global_root_ca1,o=beijing_certificate_authority,c=cn	CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN	CN=BJCA Global Root CA1,O=BEIJING CERTIFICATE AUTHORITY,C=CN	`556f65e3b4d9906a1b09d16c3ec06c20`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
18	cn=bjca_global_root_ca2,o=beijing_certificate_authority,c=cn	CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN	CN=BJCA Global Root CA2,O=BEIJING CERTIFICATE AUTHORITY,C=CN	`2c17087d642ac0fe85185906cfb44aeb`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
19	cn=buypass_class_2_root_ca,o=buypass_as-983163327,c=no	CN=Buypass Class 2 Root CA,O=Buypass AS-983163327,C=NO	CN=Buypass Class 2 Root CA,O=Buypass AS-983163327,C=NO	`2`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
20	cn=buypass_class_3_root_ca,o=buypass_as-983163327,c=no	CN=Buypass Class 3 Root CA,O=Buypass AS-983163327,C=NO	CN=Buypass Class 3 Root CA,O=Buypass AS-983163327,C=NO	`2`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
21	cn=ca_disig_root_r2,o=disig_a.s.,l=bratislava,c=sk	CN=CA Disig Root R2,O=Disig a.s.,L=Bratislava,C=SK	CN=CA Disig Root R2,O=Disig a.s.,L=Bratislava,C=SK	`92b888dbb08ac163`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
22	cn=certainly_root_e1,o=certainly,c=us	CN=Certainly Root E1,O=Certainly,C=US	CN=Certainly Root E1,O=Certainly,C=US	`62533b1470333275cf98d9ab9bfccf8`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
23	cn=certainly_root_r1,o=certainly,c=us	CN=Certainly Root R1,O=Certainly,C=US	CN=Certainly Root R1,O=Certainly,C=US	`8e0ff94b907168653354f4d44439b7e0`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
24	cn=certigna,o=dhimyotis,c=fr	CN=Certigna,O=Dhimyotis,C=FR	CN=Certigna,O=Dhimyotis,C=FR	`fedce3010fc948ff`	2048-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
25	cn=certigna_root_ca,ou=0002_48146308100036,o=dhimyotis,c=fr	CN=Certigna Root CA,OU=0002 48146308100036,O=Dhimyotis,C=FR	CN=Certigna Root CA,OU=0002 48146308100036,O=Dhimyotis,C=FR	`cae91b89f155030da3e6416dc4e3a6e1`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
26	cn=certum_ec-384_ca,ou=certum_certification_authority,o=asseco_data_systems_s.a.,c=pl	CN=Certum EC-384 CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL	CN=Certum EC-384 CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL	`788f275c81125220a504d02dddba73f4`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
27	cn=certum_trusted_network_ca,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl	CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL	CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL	`444c0`	2048-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
28	cn=certum_trusted_network_ca_2,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl	CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL	CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL	`21d6d04a4f250fc93237fcaa5e128de9`	4096-bit RSA	sha512WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
29	cn=certum_trusted_root_ca,ou=certum_certification_authority,o=asseco_data_systems_s.a.,c=pl	CN=Certum Trusted Root CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL	CN=Certum Trusted Root CA,OU=Certum Certification Authority,O=Asseco Data Systems S.A.,C=PL	`1ebf5950b8c980374c06f7eb554fb5ed`	4096-bit RSA	sha512WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
30	cn=cfca_ev_root,o=china_financial_certification_authority,c=cn	CN=CFCA EV ROOT,O=China Financial Certification Authority,C=CN	CN=CFCA EV ROOT,O=China Financial Certification Authority,C=CN	`184accd6`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
31	cn=comodo_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb	CN=COMODO Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	CN=COMODO Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	`4e812d8a8265e00b02ee3e350246e53d`	2048-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
32	cn=comodo_ecc_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb	CN=COMODO ECC Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	CN=COMODO ECC Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	`1f47afaa62007050544c019e9b63992a`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
33	cn=comodo_rsa_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb	CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB	`4caaf9cadb636fe01ff74ed85b03869d`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
34	cn=d-trust_br_root_ca_1_2020,o=d-trust_gmbh,c=de	CN=D-TRUST BR Root CA 1 2020,O=D-Trust GmbH,C=DE	CN=D-TRUST BR Root CA 1 2020,O=D-Trust GmbH,C=DE	`7cc98f2b84d7dfea0fc9659ad34b4d96`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
35	cn=d-trust_br_root_ca_2_2023,o=d-trust_gmbh,c=de	CN=D-TRUST BR Root CA 2 2023,O=D-Trust GmbH,C=DE	CN=D-TRUST BR Root CA 2 2023,O=D-Trust GmbH,C=DE	`733b3004485bd94d782e734bc9a1dc66`	4096-bit RSA	sha512WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
36	cn=d-trust_ev_root_ca_1_2020,o=d-trust_gmbh,c=de	CN=D-TRUST EV Root CA 1 2020,O=D-Trust GmbH,C=DE	CN=D-TRUST EV Root CA 1 2020,O=D-Trust GmbH,C=DE	`5f0241d77a877c4c03a3ac968dfbffd0`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
37	cn=d-trust_ev_root_ca_2_2023,o=d-trust_gmbh,c=de	CN=D-TRUST EV Root CA 2 2023,O=D-Trust GmbH,C=DE	CN=D-TRUST EV Root CA 2 2023,O=D-Trust GmbH,C=DE	`6926097e804b4ca0a78c7862535f5a6f`	4096-bit RSA	sha512WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
38	cn=d-trust_root_class_3_ca_2_2009,o=d-trust_gmbh,c=de	CN=D-TRUST Root Class 3 CA 2 2009,O=D-Trust GmbH,C=DE	CN=D-TRUST Root Class 3 CA 2 2009,O=D-Trust GmbH,C=DE	`983f3`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
39	cn=d-trust_root_class_3_ca_2_ev_2009,o=d-trust_gmbh,c=de	CN=D-TRUST Root Class 3 CA 2 EV 2009,O=D-Trust GmbH,C=DE	CN=D-TRUST Root Class 3 CA 2 EV 2009,O=D-Trust GmbH,C=DE	`983f4`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
40	cn=digicert_assured_id_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US	CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US	`ce7e0e517d846fe8fe560fc1bf03039`	2048-bit RSA	sha1WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
41	cn=digicert_assured_id_root_g2,ou=www.digicert.com,o=digicert_inc,c=us	CN=DigiCert Assured ID Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US	CN=DigiCert Assured ID Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US	`b931c3ad63967ea6723bfc3af9af44b`	2048-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
42	cn=digicert_assured_id_root_g3,ou=www.digicert.com,o=digicert_inc,c=us	CN=DigiCert Assured ID Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US	CN=DigiCert Assured ID Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US	`ba15afa1ddfa0b54944afcd24a06cec`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
43	cn=digicert_global_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US	CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US	`83be056904246b1a1756ac95991c74a`	2048-bit RSA	sha1WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
44	cn=digicert_global_root_g2,ou=www.digicert.com,o=digicert_inc,c=us	CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US	CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US	`33af1e6a711a9a0bb2864b11d09fae5`	2048-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
45	cn=digicert_global_root_g3,ou=www.digicert.com,o=digicert_inc,c=us	CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US	CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US	`55556bcf25ea43535c3a40fd5ab4572`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
46	cn=digicert_high_assurance_ev_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US	CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US	`2ac5c266a0b409b8f0b79f2ae462577`	2048-bit RSA	sha1WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
47	cn=digicert_tls_ecc_p384_root_g5,o=digicert__inc.,c=us	CN=DigiCert TLS ECC P384 Root G5,O=DigiCert\, Inc.,C=US	CN=DigiCert TLS ECC P384 Root G5,O=DigiCert\, Inc.,C=US	`9e09365acf7d9c8b93e1c0b042a2ef3`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
48	cn=digicert_tls_rsa4096_root_g5,o=digicert__inc.,c=us	CN=DigiCert TLS RSA4096 Root G5,O=DigiCert\, Inc.,C=US	CN=DigiCert TLS RSA4096 Root G5,O=DigiCert\, Inc.,C=US	`8f9b478a8fa7eda6a333789de7ccf8a`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
49	cn=digicert_trusted_root_g4,ou=www.digicert.com,o=digicert_inc,c=us	CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US	CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US	`59b1b579e8e2132e23907bda777755c`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
50	cn=e-szigno_root_ca_2017,o=microsec_ltd.,l=budapest,c=hu	CN=e-Szigno Root CA 2017,2.5.4.97=VATHU-23584497,O=Microsec Ltd.,L=Budapest,C=HU	CN=e-Szigno Root CA 2017,2.5.4.97=VATHU-23584497,O=Microsec Ltd.,L=Budapest,C=HU	`15448ef21fd97590df5040a`	⚠ 256-bit EC	ecdsa-with-SHA256	CA	KeyCertSign CrlSign	none	none	present CA: True
51	cn=emsign_ecc_root_ca_-_c3,o=emudhra_inc,ou=emsign_pki,c=us	CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US	CN=emSign ECC Root CA - C3,O=eMudhra Inc,OU=emSign PKI,C=US	`7b71b68256b8127c9ca8`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
52	cn=emsign_ecc_root_ca_-_g3,o=emudhra_technologies_limited,ou=emsign_pki,c=in	CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN	CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN	`3cf607a968700eda8b84`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
53	cn=emsign_root_ca_-_c1,o=emudhra_inc,ou=emsign_pki,c=us	CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US	CN=emSign Root CA - C1,O=eMudhra Inc,OU=emSign PKI,C=US	`aecf00bac4cf32f843b2`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
54	cn=emsign_root_ca_-_g1,o=emudhra_technologies_limited,ou=emsign_pki,c=in	CN=emSign Root CA - G1,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN	CN=emSign Root CA - G1,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN	`31f5e4620c6c58edd6d8`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
55	cn=entrust_root_certification_authority,ou=(c)_2006_entrust__inc.,ou=www.entrust.net/cps_is_incorporated_by_reference,o=entrust__inc.,c=us	CN=Entrust Root Certification Authority,OU=(c) 2006 Entrust\, Inc.,OU=www.entrust.net/CPS is incorporated by reference,O=Entrust\, Inc.,C=US	CN=Entrust Root Certification Authority,OU=(c) 2006 Entrust\, Inc.,OU=www.entrust.net/CPS is incorporated by reference,O=Entrust\, Inc.,C=US	`456b5054`	2048-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
56	cn=entrust_root_certification_authority_-_ec1,ou=(c)_2012_entrust__inc._-_for_authorized_use_only,ou=see_www.entrust.net/legal-terms,o=entrust__inc.,c=us	CN=Entrust Root Certification Authority - EC1,OU=(c) 2012 Entrust\, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust\, Inc.,C=US	CN=Entrust Root Certification Authority - EC1,OU=(c) 2012 Entrust\, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust\, Inc.,C=US	`a68b79290000000050d091f9`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
57	cn=entrust_root_certification_authority_-_g2,ou=(c)_2009_entrust__inc._-_for_authorized_use_only,ou=see_www.entrust.net/legal-terms,o=entrust__inc.,c=us	CN=Entrust Root Certification Authority - G2,OU=(c) 2009 Entrust\, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust\, Inc.,C=US	CN=Entrust Root Certification Authority - G2,OU=(c) 2009 Entrust\, Inc. - for authorized use only,OU=See www.entrust.net/legal-terms,O=Entrust\, Inc.,C=US	`4a538c28`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
58	cn=firmaprofesional_ca_root-a_web,o=firmaprofesional_sa,c=es	CN=FIRMAPROFESIONAL CA ROOT-A WEB,2.5.4.97=VATES-A62634068,O=Firmaprofesional SA,C=ES	CN=FIRMAPROFESIONAL CA ROOT-A WEB,2.5.4.97=VATES-A62634068,O=Firmaprofesional SA,C=ES	`319721edaf89427f354187a167564c6d`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
59	cn=gdca_trustauth_r5_root,o=guang_dong_certificate_authority_co._ltd.,c=cn	CN=GDCA TrustAUTH R5 ROOT,O=GUANG DONG CERTIFICATE AUTHORITY CO.\,LTD.,C=CN	CN=GDCA TrustAUTH R5 ROOT,O=GUANG DONG CERTIFICATE AUTHORITY CO.\,LTD.,C=CN	`7d0997fef047ea7a`	4096-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
60	cn=globalsign,o=globalsign,ou=globalsign_ecc_root_ca_-_r4	CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R4	CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R4	`203e57ef53f93fda50921b2a6`	⚠ 256-bit EC	ecdsa-with-SHA256	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
61	cn=globalsign,o=globalsign,ou=globalsign_ecc_root_ca_-_r5	CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R5	CN=GlobalSign,O=GlobalSign,OU=GlobalSign ECC Root CA - R5	`605949e0262ebb55f90a778a71f94ad86c`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
62	cn=globalsign,o=globalsign,ou=globalsign_root_ca_-_r3	CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R3	CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R3	`4000000000121585308a2`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
63	cn=globalsign,o=globalsign,ou=globalsign_root_ca_-_r6	CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R6	CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R6	`45e6bb038333c3856548e6ff4551`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
64	cn=globalsign_root_e46,o=globalsign_nv-sa,c=be	CN=GlobalSign Root E46,O=GlobalSign nv-sa,C=BE	CN=GlobalSign Root E46,O=GlobalSign nv-sa,C=BE	`11d2bbba336ed4bce62468c50d841d98e843`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
65	cn=globalsign_root_r46,o=globalsign_nv-sa,c=be	CN=GlobalSign Root R46,O=GlobalSign nv-sa,C=BE	CN=GlobalSign Root R46,O=GlobalSign nv-sa,C=BE	`11d2bbb9d723189e405f0a9d2dd0df2567d1`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
66	cn=globaltrust_2020,o=e-commerce_monitoring_gmbh,c=at	CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT	CN=GLOBALTRUST 2020,O=e-commerce monitoring GmbH,C=AT	`5a4bbd5afb4f8a5bfa65e5`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
67	cn=go_daddy_root_certificate_authority_-_g2,o=godaddy.com__inc.,l=scottsdale,st=arizona,c=us	CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US	CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US	`0`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
68	cn=gts_root_r1,o=google_trust_services_llc,c=us	CN=GTS Root R1,O=Google Trust Services LLC,C=US	CN=GTS Root R1,O=Google Trust Services LLC,C=US	`203e5936f31b01349886ba217`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
69	cn=gts_root_r2,o=google_trust_services_llc,c=us	CN=GTS Root R2,O=Google Trust Services LLC,C=US	CN=GTS Root R2,O=Google Trust Services LLC,C=US	`203e5aec58d04251aab1125aa`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
70	cn=gts_root_r3,o=google_trust_services_llc,c=us	CN=GTS Root R3,O=Google Trust Services LLC,C=US	CN=GTS Root R3,O=Google Trust Services LLC,C=US	`203e5b882eb20f825276d3d66`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
71	cn=gts_root_r4,o=google_trust_services_llc,c=us	CN=GTS Root R4,O=Google Trust Services LLC,C=US	CN=GTS Root R4,O=Google Trust Services LLC,C=US	`203e5c068ef631a9c72905052`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
72	cn=harica_tls_ecc_root_ca_2021,o=hellenic_academic_and_research_institutions_ca,c=gr	CN=HARICA TLS ECC Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR	CN=HARICA TLS ECC Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR	`67749d8d77d83b6adb22f4ff59e2bfce`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
73	cn=harica_tls_rsa_root_ca_2021,o=hellenic_academic_and_research_institutions_ca,c=gr	CN=HARICA TLS RSA Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR	CN=HARICA TLS RSA Root CA 2021,O=Hellenic Academic and Research Institutions CA,C=GR	`39ca931cef43f3c68e93c7f46489387e`	4096-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
74	cn=hellenic_academic_and_research_institutions_ecc_rootca_2015,o=hellenic_academic_and_research_institutions_cert._authority,l=athens,c=gr	CN=Hellenic Academic and Research Institutions ECC RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR	CN=Hellenic Academic and Research Institutions ECC RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR	`0`	⚠ 384-bit EC	ecdsa-with-SHA256	CA	KeyCertSign CrlSign	none	none	present CA: True
75	cn=hellenic_academic_and_research_institutions_rootca_2015,o=hellenic_academic_and_research_institutions_cert._authority,l=athens,c=gr	CN=Hellenic Academic and Research Institutions RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR	CN=Hellenic Academic and Research Institutions RootCA 2015,O=Hellenic Academic and Research Institutions Cert. Authority,L=Athens,C=GR	`0`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
76	cn=hipki_root_ca_-_g1,o=chunghwa_telecom_co.__ltd.,c=tw	CN=HiPKI Root CA - G1,O=Chunghwa Telecom Co.\, Ltd.,C=TW	CN=HiPKI Root CA - G1,O=Chunghwa Telecom Co.\, Ltd.,C=TW	`2dddacce629794a143e8b0cd766a5e60`	4096-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
77	cn=hongkong_post_root_ca_3,o=hongkong_post,l=hong_kong,st=hong_kong,c=hk	CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK	CN=Hongkong Post Root CA 3,O=Hongkong Post,L=Hong Kong,ST=Hong Kong,C=HK	`8165f8a4ca5ec00c99340dfc4c6ae23b81c5aa4`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
78	cn=identrust_commercial_root_ca_1,o=identrust,c=us	CN=IdenTrust Commercial Root CA 1,O=IdenTrust,C=US	CN=IdenTrust Commercial Root CA 1,O=IdenTrust,C=US	`a0142800000014523c844b500000002`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
79	cn=identrust_public_sector_root_ca_1,o=identrust,c=us	CN=IdenTrust Public Sector Root CA 1,O=IdenTrust,C=US	CN=IdenTrust Public Sector Root CA 1,O=IdenTrust,C=US	`a0142800000014523cf467c00000002`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
80	cn=isrg_root_x1,o=internet_security_research_group,c=us	CN=ISRG Root X1,O=Internet Security Research Group,C=US	CN=ISRG Root X1,O=Internet Security Research Group,C=US	`8210cfb0d240e3594463e0bb63828b00`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
81	cn=isrg_root_x2,o=internet_security_research_group,c=us	CN=ISRG Root X2,O=Internet Security Research Group,C=US	CN=ISRG Root X2,O=Internet Security Research Group,C=US	`41d29dd172eaeea780c12c6ce92f8752`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
82	cn=izenpe.com,o=izenpe_s.a.,c=es	CN=Izenpe.com,O=IZENPE S.A.,C=ES	CN=Izenpe.com,O=IZENPE S.A.,C=ES	`b0b75a16485fbfe1cbf58bd719e67d`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	Email info@izenpe.com	present CA: True
83	cn=microsec_e-szigno_root_ca_2009,o=microsec_ltd.,l=budapest,c=hu	emailAddress=info@e-szigno.hu,CN=Microsec e-Szigno Root CA 2009,O=Microsec Ltd.,L=Budapest,C=HU	emailAddress=info@e-szigno.hu,CN=Microsec e-Szigno Root CA 2009,O=Microsec Ltd.,L=Budapest,C=HU	`c27e43044e473f19`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	Email info@e-szigno.hu	present CA: True
84	cn=microsoft_ecc_root_certificate_authority_2017,o=microsoft_corporation,c=us	CN=Microsoft ECC Root Certificate Authority 2017,O=Microsoft Corporation,C=US	CN=Microsoft ECC Root Certificate Authority 2017,O=Microsoft Corporation,C=US	`66f23daf87de8bb14aea0c573101c2ec`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
85	cn=microsoft_rsa_root_certificate_authority_2017,o=microsoft_corporation,c=us	CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,C=US	CN=Microsoft RSA Root Certificate Authority 2017,O=Microsoft Corporation,C=US	`1ed397095fd8b4b347701eaabe7f45b3`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
86	cn=naver_global_root_certification_authority,o=naver_business_platform_corp.,c=kr	CN=NAVER Global Root Certification Authority,O=NAVER BUSINESS PLATFORM Corp.,C=KR	CN=NAVER Global Root Certification Authority,O=NAVER BUSINESS PLATFORM Corp.,C=KR	`194301ea20bddf5c5332ab1434471f8d6504d0d`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
87	cn=netlock_arany_(class_gold)_f\c5\91tan\c3\bas\c3\adtv\c3\a1ny,ou=tan\c3\bas\c3\adtv\c3\a1nykiad\c3\b3k_(certification_services),o=netlock_kft.,l=budapest,c=hu	CN=NetLock Arany (Class Gold) Főtanúsítvány,OU=Tanúsítványkiadók (Certification Services),O=NetLock Kft.,L=Budapest,C=HU	CN=NetLock Arany (Class Gold) Főtanúsítvány,OU=Tanúsítványkiadók (Certification Services),O=NetLock Kft.,L=Budapest,C=HU	`49412ce40010`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True PathLength: 4
88	cn=oiste_server_root_ecc_g1,o=oiste_foundation,c=ch	CN=OISTE Server Root ECC G1,O=OISTE Foundation,C=CH	CN=OISTE Server Root ECC G1,O=OISTE Foundation,C=CH	`23f9c3d635af8f284b1ff054ea7e979d`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
89	cn=oiste_server_root_rsa_g1,o=oiste_foundation,c=ch	CN=OISTE Server Root RSA G1,O=OISTE Foundation,C=CH	CN=OISTE Server Root RSA G1,O=OISTE Foundation,C=CH	`55a5d9679428c6ed0cfa27dd5b014d18`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
90	cn=oiste_wisekey_global_root_gb_ca,ou=oiste_foundation_endorsed,o=wisekey,c=ch	CN=OISTE WISeKey Global Root GB CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH	CN=OISTE WISeKey Global Root GB CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH	`76b1205274f0858746b3f8231af6c2c0`	2048-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
91	cn=oiste_wisekey_global_root_gc_ca,ou=oiste_foundation_endorsed,o=wisekey,c=ch	CN=OISTE WISeKey Global Root GC CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH	CN=OISTE WISeKey Global Root GC CA,OU=OISTE Foundation Endorsed,O=WISeKey,C=CH	`212a560caeda0cab4045bf2ba22d3aea`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
92	cn=quovadis_root_ca_1_g3,o=quovadis_limited,c=bm	CN=QuoVadis Root CA 1 G3,O=QuoVadis Limited,C=BM	CN=QuoVadis Root CA 1 G3,O=QuoVadis Limited,C=BM	`78585f2ead2c194be3370735341328b596d46593`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
93	cn=quovadis_root_ca_2,o=quovadis_limited,c=bm	CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM	CN=QuoVadis Root CA 2,O=QuoVadis Limited,C=BM	`509`	4096-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
94	cn=quovadis_root_ca_2_g3,o=quovadis_limited,c=bm	CN=QuoVadis Root CA 2 G3,O=QuoVadis Limited,C=BM	CN=QuoVadis Root CA 2 G3,O=QuoVadis Limited,C=BM	`445734245b81899b35f2ceb82b3b5ba726f07528`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
95	cn=quovadis_root_ca_3,o=quovadis_limited,c=bm	CN=QuoVadis Root CA 3,O=QuoVadis Limited,C=BM	CN=QuoVadis Root CA 3,O=QuoVadis Limited,C=BM	`5c6`	4096-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
96	cn=quovadis_root_ca_3_g3,o=quovadis_limited,c=bm	CN=QuoVadis Root CA 3 G3,O=QuoVadis Limited,C=BM	CN=QuoVadis Root CA 3 G3,O=QuoVadis Limited,C=BM	`2ef59b0228a7db7affd5a3a9eebd03a0cf126a1d`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
97	cn=sectigo_public_server_authentication_root_e46,o=sectigo_limited,c=gb	CN=Sectigo Public Server Authentication Root E46,O=Sectigo Limited,C=GB	CN=Sectigo Public Server Authentication Root E46,O=Sectigo Limited,C=GB	`42f2ccda1b6937445f15fe752810b8f4`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
98	cn=sectigo_public_server_authentication_root_r46,o=sectigo_limited,c=gb	CN=Sectigo Public Server Authentication Root R46,O=Sectigo Limited,C=GB	CN=Sectigo Public Server Authentication Root R46,O=Sectigo Limited,C=GB	`758dfd8bae7c0700faa925a7e1c7ad14`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
99	cn=secure_global_ca,o=securetrust_corporation,c=us	CN=Secure Global CA,O=SecureTrust Corporation,C=US	CN=Secure Global CA,O=SecureTrust Corporation,C=US	`75622a4e8d48a894df413c8f0f8eaa5`	2048-bit RSA	sha1WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
100	cn=securesign_root_ca12,o=cybertrust_japan_co.__ltd.,c=jp	CN=SecureSign Root CA12,O=Cybertrust Japan Co.\, Ltd.,C=JP	CN=SecureSign Root CA12,O=Cybertrust Japan Co.\, Ltd.,C=JP	`66f9c7c1afecc251b4ed5397e6e682c32b1c9016`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
101	cn=securesign_root_ca14,o=cybertrust_japan_co.__ltd.,c=jp	CN=SecureSign Root CA14,O=Cybertrust Japan Co.\, Ltd.,C=JP	CN=SecureSign Root CA14,O=Cybertrust Japan Co.\, Ltd.,C=JP	`64db5a0c204ee8d72977c85027a25a27dd2df2cb`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
102	cn=securesign_root_ca15,o=cybertrust_japan_co.__ltd.,c=jp	CN=SecureSign Root CA15,O=Cybertrust Japan Co.\, Ltd.,C=JP	CN=SecureSign Root CA15,O=Cybertrust Japan Co.\, Ltd.,C=JP	`1615c7c3d849a7be690c8a88edf070f9ddb73e87`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
103	cn=securetrust_ca,o=securetrust_corporation,c=us	CN=SecureTrust CA,O=SecureTrust Corporation,C=US	CN=SecureTrust CA,O=SecureTrust Corporation,C=US	`cf08e5c0816a5ad427ff0eb271859d0`	2048-bit RSA	sha1WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
104	cn=security_communication_ecc_rootca1,o=secom_trust_systems_co._ltd.,c=jp	CN=Security Communication ECC RootCA1,O=SECOM Trust Systems CO.\,LTD.,C=JP	CN=Security Communication ECC RootCA1,O=SECOM Trust Systems CO.\,LTD.,C=JP	`d65d9bb378812eeb`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
105	cn=ssl.com_ev_root_certification_authority_ecc,o=ssl_corporation,l=houston,st=texas,c=us	CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US	CN=SSL.com EV Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US	`2c299c5b16ed0595`	⚠ 384-bit EC	ecdsa-with-SHA256	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
106	cn=ssl.com_ev_root_certification_authority_rsa_r2,o=ssl_corporation,l=houston,st=texas,c=us	CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US	CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US	`56b629cd34bc78f6`	4096-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
107	cn=ssl.com_root_certification_authority_ecc,o=ssl_corporation,l=houston,st=texas,c=us	CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US	CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US	`75e6dfcbc1685ba8`	⚠ 384-bit EC	ecdsa-with-SHA256	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
108	cn=ssl.com_root_certification_authority_rsa,o=ssl_corporation,l=houston,st=texas,c=us	CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US	CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US	`7b2c9bd316803299`	4096-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
109	cn=ssl.com_tls_ecc_root_ca_2022,o=ssl_corporation,c=us	CN=SSL.com TLS ECC Root CA 2022,O=SSL Corporation,C=US	CN=SSL.com TLS ECC Root CA 2022,O=SSL Corporation,C=US	`1403f5abfb378b17405be243b2a5d1c4`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
110	cn=ssl.com_tls_rsa_root_ca_2022,o=ssl_corporation,c=us	CN=SSL.com TLS RSA Root CA 2022,O=SSL Corporation,C=US	CN=SSL.com TLS RSA Root CA 2022,O=SSL Corporation,C=US	`6fbedaad73bd0840e28b4dbed4f75b91`	4096-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
111	cn=starfield_root_certificate_authority_-_g2,o=starfield_technologies__inc.,l=scottsdale,st=arizona,c=us	CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US	CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US	`0`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
112	cn=starfield_services_root_certificate_authority_-_g2,o=starfield_technologies__inc.,l=scottsdale,st=arizona,c=us	CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US	CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US	`0`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
113	cn=swisssign_gold_ca_-_g2,o=swisssign_ag,c=ch	CN=SwissSign Gold CA - G2,O=SwissSign AG,C=CH	CN=SwissSign Gold CA - G2,O=SwissSign AG,C=CH	`bb401c43f55e4fb0`	4096-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
114	cn=swisssign_rsa_tls_root_ca_2022_-_1,o=swisssign_ag,c=ch	CN=SwissSign RSA TLS Root CA 2022 - 1,O=SwissSign AG,C=CH	CN=SwissSign RSA TLS Root CA 2022 - 1,O=SwissSign AG,C=CH	`43fa0c5f4e1b801844efd1b44f351f44f480edcb`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
115	cn=szafir_root_ca2,o=krajowa_izba_rozliczeniowa_s.a.,c=pl	CN=SZAFIR ROOT CA2,O=Krajowa Izba Rozliczeniowa S.A.,C=PL	CN=SZAFIR ROOT CA2,O=Krajowa Izba Rozliczeniowa S.A.,C=PL	`3e8a5d07ec55d232d5b7e3b65f01eb2ddce4d6e4`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
116	cn=t-telesec_globalroot_class_2,ou=t-systems_trust_center,o=t-systems_enterprise_services_gmbh,c=de	CN=T-TeleSec GlobalRoot Class 2,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE	CN=T-TeleSec GlobalRoot Class 2,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE	`1`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
117	cn=t-telesec_globalroot_class_3,ou=t-systems_trust_center,o=t-systems_enterprise_services_gmbh,c=de	CN=T-TeleSec GlobalRoot Class 3,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE	CN=T-TeleSec GlobalRoot Class 3,OU=T-Systems Trust Center,O=T-Systems Enterprise Services GmbH,C=DE	`1`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
118	cn=telekom_security_tls_ecc_root_2020,o=deutsche_telekom_security_gmbh,c=de	CN=Telekom Security TLS ECC Root 2020,O=Deutsche Telekom Security GmbH,C=DE	CN=Telekom Security TLS ECC Root 2020,O=Deutsche Telekom Security GmbH,C=DE	`363a968cc95cb258cdd0015dc5e55700`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
119	cn=telekom_security_tls_rsa_root_2023,o=deutsche_telekom_security_gmbh,c=de	CN=Telekom Security TLS RSA Root 2023,O=Deutsche Telekom Security GmbH,C=DE	CN=Telekom Security TLS RSA Root 2023,O=Deutsche Telekom Security GmbH,C=DE	`219c542de8f6ec7177fa4ee8c3705797`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
120	cn=telia_root_ca_v2,o=telia_finland_oyj,c=fi	CN=Telia Root CA v2,O=Telia Finland Oyj,C=FI	CN=Telia Root CA v2,O=Telia Finland Oyj,C=FI	`1675f27d6fe7ae3e4acbe095b059e`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
121	cn=teliasonera_root_ca_v1,o=teliasonera	CN=TeliaSonera Root CA v1,O=TeliaSonera	CN=TeliaSonera Root CA v1,O=TeliaSonera	`95be16a0f72e46f17b398272fa8bcd96`	4096-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
122	cn=trustasia_global_root_ca_g3,o=trustasia_technologies__inc.,c=cn	CN=TrustAsia Global Root CA G3,O=TrustAsia Technologies\, Inc.,C=CN	CN=TrustAsia Global Root CA G3,O=TrustAsia Technologies\, Inc.,C=CN	`64f60e6577616aab3bb4ea8584bbb189b871930f`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
123	cn=trustasia_global_root_ca_g4,o=trustasia_technologies__inc.,c=cn	CN=TrustAsia Global Root CA G4,O=TrustAsia Technologies\, Inc.,C=CN	CN=TrustAsia Global Root CA G4,O=TrustAsia Technologies\, Inc.,C=CN	`4f2364b88e97639ec65381c1764ecb2a7415d6d7`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
124	cn=trustasia_tls_ecc_root_ca,o=trustasia_technologies__inc.,c=cn	CN=TrustAsia TLS ECC Root CA,O=TrustAsia Technologies\, Inc.,C=CN	CN=TrustAsia TLS ECC Root CA,O=TrustAsia Technologies\, Inc.,C=CN	`3674e14d7c6513c9ac835525a03e527e2f5068c7`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
125	cn=trustasia_tls_rsa_root_ca,o=trustasia_technologies__inc.,c=cn	CN=TrustAsia TLS RSA Root CA,O=TrustAsia Technologies\, Inc.,C=CN	CN=TrustAsia TLS RSA Root CA,O=TrustAsia Technologies\, Inc.,C=CN	`1c18d8cfe5533f2235465354243c6c47d15c4a9c`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
126	cn=trustwave_global_certification_authority,o=trustwave_holdings__inc.,l=chicago,st=illinois,c=us	CN=Trustwave Global Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US	CN=Trustwave Global Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US	`5f70e86da49f346352ebab2`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
127	cn=trustwave_global_ecc_p256_certification_authority,o=trustwave_holdings__inc.,l=chicago,st=illinois,c=us	CN=Trustwave Global ECC P256 Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US	CN=Trustwave Global ECC P256 Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US	`d6a5f083f285c3e5195df5d`	⚠ 256-bit EC	ecdsa-with-SHA256	CA	KeyCertSign CrlSign	none	none	present CA: True
128	cn=trustwave_global_ecc_p384_certification_authority,o=trustwave_holdings__inc.,l=chicago,st=illinois,c=us	CN=Trustwave Global ECC P384 Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US	CN=Trustwave Global ECC P384 Certification Authority,O=Trustwave Holdings\, Inc.,L=Chicago,ST=Illinois,C=US	`8bd85976c9927a48068473b`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
129	cn=tubitak_kamu_sm_ssl_kok_sertifikasi_-_surum_1,ou=kamu_sertifikasyon_merkezi_-_kamu_sm,o=turkiye_bilimsel_ve_teknolojik_arastirma_kurumu_-_tubitak,l=gebze_-_kocaeli,c=tr	CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1,OU=Kamu Sertifikasyon Merkezi - Kamu SM,O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK,L=Gebze - Kocaeli,C=TR	CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1,OU=Kamu Sertifikasyon Merkezi - Kamu SM,O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK,L=Gebze - Kocaeli,C=TR	`1`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
130	cn=tuntrust_root_ca,o=agence_nationale_de_certification_electronique,c=tn	CN=TunTrust Root CA,O=Agence Nationale de Certification Electronique,C=TN	CN=TunTrust Root CA,O=Agence Nationale de Certification Electronique,C=TN	`1302d5e2404c92468616675db4bbbbb26b3efc13`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
131	cn=twca_cyber_root_ca,ou=root_ca,o=taiwan-ca,c=tw	CN=TWCA CYBER Root CA,OU=Root CA,O=TAIWAN-CA,C=TW	CN=TWCA CYBER Root CA,OU=Root CA,O=TAIWAN-CA,C=TW	`4001348cc200000000000000013cf2c6`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
132	cn=twca_global_root_ca,ou=root_ca,o=taiwan-ca,c=tw	CN=TWCA Global Root CA,OU=Root CA,O=TAIWAN-CA,C=TW	CN=TWCA Global Root CA,OU=Root CA,O=TAIWAN-CA,C=TW	`cbe`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
133	cn=twca_root_certification_authority,ou=root_ca,o=taiwan-ca,c=tw	CN=TWCA Root Certification Authority,OU=Root CA,O=TAIWAN-CA,C=TW	CN=TWCA Root Certification Authority,OU=Root CA,O=TAIWAN-CA,C=TW	`1`	2048-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
134	cn=uca_extended_validation_root,o=unitrust,c=cn	CN=UCA Extended Validation Root,O=UniTrust,C=CN	CN=UCA Extended Validation Root,O=UniTrust,C=CN	`4fd22b8ff564c8339e4f345866237060`	4096-bit RSA	sha256WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
135	cn=uca_global_g2_root,o=unitrust,c=cn	CN=UCA Global G2 Root,O=UniTrust,C=CN	CN=UCA Global G2 Root,O=UniTrust,C=CN	`5ddfb1da5aa3ed5dbe5a6520650390ef`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
136	cn=usertrust_ecc_certification_authority,o=the_usertrust_network,l=jersey_city,st=new_jersey,c=us	CN=USERTrust ECC Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US	CN=USERTrust ECC Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US	`5c8b99c55a94c5d27156decd8980cc26`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
137	cn=usertrust_rsa_certification_authority,o=the_usertrust_network,l=jersey_city,st=new_jersey,c=us	CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US	CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US	`1fd6d30fca3ca51a81bbc640e35032d`	4096-bit RSA	sha384WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
138	cn=vtrus_ecc_root_ca,o=itruschina_co._ltd.,c=cn	CN=vTrus ECC Root CA,O=iTrusChina Co.\,Ltd.,C=CN	CN=vTrus ECC Root CA,O=iTrusChina Co.\,Ltd.,C=CN	`6e6abc59aa53be983967a2d26ba43be66d1cd6da`	⚠ 384-bit EC	ecdsa-with-SHA384	CA	KeyCertSign CrlSign	none	none	present CA: True
139	cn=vtrus_root_ca,o=itruschina_co._ltd.,c=cn	CN=vTrus Root CA,O=iTrusChina Co.\,Ltd.,C=CN	CN=vTrus Root CA,O=iTrusChina Co.\,Ltd.,C=CN	`43e37113d8b359145db7ce8cfd35fd6fbc058d45`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
140	ou=ac_raiz_fnmt-rcm,o=fnmt-rcm,c=es	OU=AC RAIZ FNMT-RCM,O=FNMT-RCM,C=ES	OU=AC RAIZ FNMT-RCM,O=FNMT-RCM,C=ES	`5d938d306736c8061d1ac754846907`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
141	ou=certsign_root_ca,o=certsign,c=ro	OU=certSIGN ROOT CA,O=certSIGN,C=RO	OU=certSIGN ROOT CA,O=certSIGN,C=RO	`200605167002`	2048-bit RSA	sha1WithRSA	CA	DigitalSignature ContentCommitment KeyCertSign CrlSign	none	none	present CA: True
142	ou=certsign_root_ca_g2,o=certsign_sa,c=ro	OU=certSIGN ROOT CA G2,O=CERTSIGN SA,C=RO	OU=certSIGN ROOT CA G2,O=CERTSIGN SA,C=RO	`110034b64ec6362d36`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
143	ou=epki_root_certification_authority,o=chunghwa_telecom_co.__ltd.,c=tw	OU=ePKI Root Certification Authority,O=Chunghwa Telecom Co.\, Ltd.,C=TW	OU=ePKI Root Certification Authority,O=Chunghwa Telecom Co.\, Ltd.,C=TW	`15c8bd65475cafb897005ee406d2bc9d`	4096-bit RSA	sha1WithRSA	CA	none	none	none	present CA: True
144	ou=security_communication_rootca2,o=secom_trust_systems_co._ltd.,c=jp	OU=Security Communication RootCA2,O=SECOM Trust Systems CO.\,LTD.,C=JP	OU=Security Communication RootCA2,O=SECOM Trust Systems CO.\,LTD.,C=JP	`0`	2048-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True

🔧 Remediation actions (22)

Priority	Category	Alias	Serial	Issue	Action	Command
P1 CRITICAL	ALGORITHM	cn=certum_trusted_network_ca_2,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl	`21d6d04a4f250fc93237fcaa5e128de9`	sha512 signature algorithm — manual verification required	Replace certificate using SHA256withRSA or stronger.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=certum_trusted_network_ca_2,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=certum_trusted_network_ca_2,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl" -file "" -trustcacerts`
P1 CRITICAL	ALGORITHM	cn=certum_trusted_root_ca,ou=certum_certification_authority,o=asseco_data_systems_s.a.,c=pl	`1ebf5950b8c980374c06f7eb554fb5ed`	sha512 signature algorithm — manual verification required	Replace certificate using SHA256withRSA or stronger.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=certum_trusted_root_ca,ou=certum_certification_authority,o=asseco_data_systems_s.a.,c=pl" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=certum_trusted_root_ca,ou=certum_certification_authority,o=asseco_data_systems_s.a.,c=pl" -file "" -trustcacerts`
P1 CRITICAL	ALGORITHM	cn=d-trust_br_root_ca_2_2023,o=d-trust_gmbh,c=de	`733b3004485bd94d782e734bc9a1dc66`	sha512 signature algorithm — manual verification required	Replace certificate using SHA256withRSA or stronger.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=d-trust_br_root_ca_2_2023,o=d-trust_gmbh,c=de" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=d-trust_br_root_ca_2_2023,o=d-trust_gmbh,c=de" -file "" -trustcacerts`
P1 CRITICAL	ALGORITHM	cn=d-trust_ev_root_ca_2_2023,o=d-trust_gmbh,c=de	`6926097e804b4ca0a78c7862535f5a6f`	sha512 signature algorithm — manual verification required	Replace certificate using SHA256withRSA or stronger.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=d-trust_ev_root_ca_2_2023,o=d-trust_gmbh,c=de" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=d-trust_ev_root_ca_2_2023,o=d-trust_gmbh,c=de" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	c=es,o=accv,ou=pkiaccv,cn=accvraiz1	`5ec3b7a6437fa4e0`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "c=es,o=accv,ou=pkiaccv,cn=accvraiz1" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "c=es,o=accv,ou=pkiaccv,cn=accvraiz1" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=affirmtrust_networking,o=affirmtrust,c=us	`7c4f04391cd4992d`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=affirmtrust_networking,o=affirmtrust,c=us" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=affirmtrust_networking,o=affirmtrust,c=us" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=certigna,o=dhimyotis,c=fr	`fedce3010fc948ff`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=certigna,o=dhimyotis,c=fr" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=certigna,o=dhimyotis,c=fr" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=certum_trusted_network_ca,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl	`444c0`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=certum_trusted_network_ca,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=certum_trusted_network_ca,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=comodo_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb	`4e812d8a8265e00b02ee3e350246e53d`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=comodo_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=comodo_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=digicert_assured_id_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	`ce7e0e517d846fe8fe560fc1bf03039`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=digicert_assured_id_root_ca,ou=www.digicert.com,o=digicert_inc,c=us" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=digicert_assured_id_root_ca,ou=www.digicert.com,o=digicert_inc,c=us" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=digicert_global_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	`83be056904246b1a1756ac95991c74a`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=digicert_global_root_ca,ou=www.digicert.com,o=digicert_inc,c=us" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=digicert_global_root_ca,ou=www.digicert.com,o=digicert_inc,c=us" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=digicert_high_assurance_ev_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	`2ac5c266a0b409b8f0b79f2ae462577`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=digicert_high_assurance_ev_root_ca,ou=www.digicert.com,o=digicert_inc,c=us" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=digicert_high_assurance_ev_root_ca,ou=www.digicert.com,o=digicert_inc,c=us" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=entrust_root_certification_authority,ou=(c)_2006_entrust__inc.,ou=www.entrust.net/cps_is_incorporated_by_reference,o=entrust__inc.,c=us	`456b5054`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=entrust_root_certification_authority,ou=(c)_2006_entrust__inc.,ou=www.entrust.net/cps_is_incorporated_by_reference,o=entrust__inc.,c=us" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=entrust_root_certification_authority,ou=(c)_2006_entrust__inc.,ou=www.entrust.net/cps_is_incorporated_by_reference,o=entrust__inc.,c=us" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=quovadis_root_ca_2,o=quovadis_limited,c=bm	`509`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=quovadis_root_ca_2,o=quovadis_limited,c=bm" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=quovadis_root_ca_2,o=quovadis_limited,c=bm" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=quovadis_root_ca_3,o=quovadis_limited,c=bm	`5c6`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=quovadis_root_ca_3,o=quovadis_limited,c=bm" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=quovadis_root_ca_3,o=quovadis_limited,c=bm" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=secure_global_ca,o=securetrust_corporation,c=us	`75622a4e8d48a894df413c8f0f8eaa5`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=secure_global_ca,o=securetrust_corporation,c=us" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=secure_global_ca,o=securetrust_corporation,c=us" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=securetrust_ca,o=securetrust_corporation,c=us	`cf08e5c0816a5ad427ff0eb271859d0`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=securetrust_ca,o=securetrust_corporation,c=us" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=securetrust_ca,o=securetrust_corporation,c=us" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=swisssign_gold_ca_-_g2,o=swisssign_ag,c=ch	`bb401c43f55e4fb0`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=swisssign_gold_ca_-_g2,o=swisssign_ag,c=ch" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=swisssign_gold_ca_-_g2,o=swisssign_ag,c=ch" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=teliasonera_root_ca_v1,o=teliasonera	`95be16a0f72e46f17b398272fa8bcd96`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=teliasonera_root_ca_v1,o=teliasonera" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=teliasonera_root_ca_v1,o=teliasonera" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	cn=twca_root_certification_authority,ou=root_ca,o=taiwan-ca,c=tw	`1`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=twca_root_certification_authority,ou=root_ca,o=taiwan-ca,c=tw" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "cn=twca_root_certification_authority,ou=root_ca,o=taiwan-ca,c=tw" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	ou=certsign_root_ca,o=certsign,c=ro	`200605167002`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "ou=certsign_root_ca,o=certsign,c=ro" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "ou=certsign_root_ca,o=certsign,c=ro" -file "" -trustcacerts`
P2 WARNING	ALGORITHM	ou=epki_root_certification_authority,o=chunghwa_telecom_co.__ltd.,c=tw	`15c8bd65475cafb897005ee406d2bc9d`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`keytool -delete -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "ou=epki_root_certification_authority,o=chunghwa_telecom_co.__ltd.,c=tw" keytool -importcert -keystore "C:\Tools\jdk-25.0.3+9\lib\security\cacerts" -alias "ou=epki_root_certification_authority,o=chunghwa_telecom_co.__ltd.,c=tw" -file "" -trustcacerts`

🔗 Chaining alias (144 chain(s))

Certificate	Chain
c=de,o=atos,cn=atos_trustedroot_2011	(root)
c=de,o=atos,cn=atos_trustedroot_root_ca_ecc_tls_2021	(root)
c=de,o=atos,cn=atos_trustedroot_root_ca_rsa_tls_2021	(root)
c=es,o=accv,ou=pkiaccv,cn=accvraiz1	(root)
cn=ac_raiz_fnmt-rcm_servidores_seguros,ou=ceres,o=fnmt-rcm,c=es	(root)
cn=actalis_authentication_root_ca,o=actalis_s.p.a./03358520967,l=milan,c=it	(root)
cn=affirmtrust_commercial,o=affirmtrust,c=us	(root)
cn=affirmtrust_networking,o=affirmtrust,c=us	(root)
cn=affirmtrust_premium,o=affirmtrust,c=us	(root)
cn=affirmtrust_premium_ecc,o=affirmtrust,c=us	(root)
cn=amazon_root_ca_1,o=amazon,c=us	(root)
cn=amazon_root_ca_2,o=amazon,c=us	(root)
cn=amazon_root_ca_3,o=amazon,c=us	(root)
cn=amazon_root_ca_4,o=amazon,c=us	(root)
cn=anf_secure_server_root_ca,ou=anf_ca_raiz,o=anf_autoridad_de_certificacion,c=es	(root)
cn=autoridad_de_certificacion_firmaprofesional_cif_a62634068,c=es	(root)
cn=bjca_global_root_ca1,o=beijing_certificate_authority,c=cn	(root)
cn=bjca_global_root_ca2,o=beijing_certificate_authority,c=cn	(root)
cn=buypass_class_2_root_ca,o=buypass_as-983163327,c=no	(root)
cn=buypass_class_3_root_ca,o=buypass_as-983163327,c=no	(root)
cn=ca_disig_root_r2,o=disig_a.s.,l=bratislava,c=sk	(root)
cn=certainly_root_e1,o=certainly,c=us	(root)
cn=certainly_root_r1,o=certainly,c=us	(root)
cn=certigna,o=dhimyotis,c=fr	(root)
cn=certigna_root_ca,ou=0002_48146308100036,o=dhimyotis,c=fr	(root)
cn=certum_ec-384_ca,ou=certum_certification_authority,o=asseco_data_systems_s.a.,c=pl	(root)
cn=certum_trusted_network_ca,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl	(root)
cn=certum_trusted_network_ca_2,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl	(root)
cn=certum_trusted_root_ca,ou=certum_certification_authority,o=asseco_data_systems_s.a.,c=pl	(root)
cn=cfca_ev_root,o=china_financial_certification_authority,c=cn	(root)
cn=comodo_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb	(root)
cn=comodo_ecc_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb	(root)
cn=comodo_rsa_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb	(root)
cn=d-trust_br_root_ca_1_2020,o=d-trust_gmbh,c=de	(root)
cn=d-trust_br_root_ca_2_2023,o=d-trust_gmbh,c=de	(root)
cn=d-trust_ev_root_ca_1_2020,o=d-trust_gmbh,c=de	(root)
cn=d-trust_ev_root_ca_2_2023,o=d-trust_gmbh,c=de	(root)
cn=d-trust_root_class_3_ca_2_2009,o=d-trust_gmbh,c=de	(root)
cn=d-trust_root_class_3_ca_2_ev_2009,o=d-trust_gmbh,c=de	(root)
cn=digicert_assured_id_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	(root)
cn=digicert_assured_id_root_g2,ou=www.digicert.com,o=digicert_inc,c=us	(root)
cn=digicert_assured_id_root_g3,ou=www.digicert.com,o=digicert_inc,c=us	(root)
cn=digicert_global_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	(root)
cn=digicert_global_root_g2,ou=www.digicert.com,o=digicert_inc,c=us	(root)
cn=digicert_global_root_g3,ou=www.digicert.com,o=digicert_inc,c=us	(root)
cn=digicert_high_assurance_ev_root_ca,ou=www.digicert.com,o=digicert_inc,c=us	(root)
cn=digicert_tls_ecc_p384_root_g5,o=digicert__inc.,c=us	(root)
cn=digicert_tls_rsa4096_root_g5,o=digicert__inc.,c=us	(root)
cn=digicert_trusted_root_g4,ou=www.digicert.com,o=digicert_inc,c=us	(root)
cn=e-szigno_root_ca_2017,o=microsec_ltd.,l=budapest,c=hu	(root)
cn=emsign_ecc_root_ca_-_c3,o=emudhra_inc,ou=emsign_pki,c=us	(root)
cn=emsign_ecc_root_ca_-_g3,o=emudhra_technologies_limited,ou=emsign_pki,c=in	(root)
cn=emsign_root_ca_-_c1,o=emudhra_inc,ou=emsign_pki,c=us	(root)
cn=emsign_root_ca_-_g1,o=emudhra_technologies_limited,ou=emsign_pki,c=in	(root)
cn=entrust_root_certification_authority,ou=(c)_2006_entrust__inc.,ou=www.entrust.net/cps_is_incorporated_by_reference,o=entrust__inc.,c=us	(root)
cn=entrust_root_certification_authority_-_ec1,ou=(c)_2012_entrust__inc._-_for_authorized_use_only,ou=see_www.entrust.net/legal-terms,o=entrust__inc.,c=us	(root)
cn=entrust_root_certification_authority_-_g2,ou=(c)_2009_entrust__inc._-_for_authorized_use_only,ou=see_www.entrust.net/legal-terms,o=entrust__inc.,c=us	(root)
cn=firmaprofesional_ca_root-a_web,o=firmaprofesional_sa,c=es	(root)
cn=gdca_trustauth_r5_root,o=guang_dong_certificate_authority_co._ltd.,c=cn	(root)
cn=globalsign,o=globalsign,ou=globalsign_ecc_root_ca_-_r4	(root)
cn=globalsign,o=globalsign,ou=globalsign_ecc_root_ca_-_r5	(root)
cn=globalsign,o=globalsign,ou=globalsign_root_ca_-_r3	(root)
cn=globalsign,o=globalsign,ou=globalsign_root_ca_-_r6	(root)
cn=globalsign_root_e46,o=globalsign_nv-sa,c=be	(root)
cn=globalsign_root_r46,o=globalsign_nv-sa,c=be	(root)
cn=globaltrust_2020,o=e-commerce_monitoring_gmbh,c=at	(root)
cn=go_daddy_root_certificate_authority_-_g2,o=godaddy.com__inc.,l=scottsdale,st=arizona,c=us	(root)
cn=gts_root_r1,o=google_trust_services_llc,c=us	(root)
cn=gts_root_r2,o=google_trust_services_llc,c=us	(root)
cn=gts_root_r3,o=google_trust_services_llc,c=us	(root)
cn=gts_root_r4,o=google_trust_services_llc,c=us	(root)
cn=harica_tls_ecc_root_ca_2021,o=hellenic_academic_and_research_institutions_ca,c=gr	(root)
cn=harica_tls_rsa_root_ca_2021,o=hellenic_academic_and_research_institutions_ca,c=gr	(root)
cn=hellenic_academic_and_research_institutions_ecc_rootca_2015,o=hellenic_academic_and_research_institutions_cert._authority,l=athens,c=gr	(root)
cn=hellenic_academic_and_research_institutions_rootca_2015,o=hellenic_academic_and_research_institutions_cert._authority,l=athens,c=gr	(root)
cn=hipki_root_ca_-_g1,o=chunghwa_telecom_co.__ltd.,c=tw	(root)
cn=hongkong_post_root_ca_3,o=hongkong_post,l=hong_kong,st=hong_kong,c=hk	(root)
cn=identrust_commercial_root_ca_1,o=identrust,c=us	(root)
cn=identrust_public_sector_root_ca_1,o=identrust,c=us	(root)
cn=isrg_root_x1,o=internet_security_research_group,c=us	(root)
cn=isrg_root_x2,o=internet_security_research_group,c=us	(root)
cn=izenpe.com,o=izenpe_s.a.,c=es	(root)
cn=microsec_e-szigno_root_ca_2009,o=microsec_ltd.,l=budapest,c=hu	(root)
cn=microsoft_ecc_root_certificate_authority_2017,o=microsoft_corporation,c=us	(root)
cn=microsoft_rsa_root_certificate_authority_2017,o=microsoft_corporation,c=us	(root)
cn=naver_global_root_certification_authority,o=naver_business_platform_corp.,c=kr	(root)
cn=netlock_arany_(class_gold)_f\c5\91tan\c3\bas\c3\adtv\c3\a1ny,ou=tan\c3\bas\c3\adtv\c3\a1nykiad\c3\b3k_(certification_services),o=netlock_kft.,l=budapest,c=hu	(root)
cn=oiste_server_root_ecc_g1,o=oiste_foundation,c=ch	(root)
cn=oiste_server_root_rsa_g1,o=oiste_foundation,c=ch	(root)
cn=oiste_wisekey_global_root_gb_ca,ou=oiste_foundation_endorsed,o=wisekey,c=ch	(root)
cn=oiste_wisekey_global_root_gc_ca,ou=oiste_foundation_endorsed,o=wisekey,c=ch	(root)
cn=quovadis_root_ca_1_g3,o=quovadis_limited,c=bm	(root)
cn=quovadis_root_ca_2,o=quovadis_limited,c=bm	(root)
cn=quovadis_root_ca_2_g3,o=quovadis_limited,c=bm	(root)
cn=quovadis_root_ca_3,o=quovadis_limited,c=bm	(root)
cn=quovadis_root_ca_3_g3,o=quovadis_limited,c=bm	(root)
cn=sectigo_public_server_authentication_root_e46,o=sectigo_limited,c=gb	(root)
cn=sectigo_public_server_authentication_root_r46,o=sectigo_limited,c=gb	(root)
cn=secure_global_ca,o=securetrust_corporation,c=us	(root)
cn=securesign_root_ca12,o=cybertrust_japan_co.__ltd.,c=jp	(root)
cn=securesign_root_ca14,o=cybertrust_japan_co.__ltd.,c=jp	(root)
cn=securesign_root_ca15,o=cybertrust_japan_co.__ltd.,c=jp	(root)
cn=securetrust_ca,o=securetrust_corporation,c=us	(root)
cn=security_communication_ecc_rootca1,o=secom_trust_systems_co._ltd.,c=jp	(root)
cn=ssl.com_ev_root_certification_authority_ecc,o=ssl_corporation,l=houston,st=texas,c=us	(root)
cn=ssl.com_ev_root_certification_authority_rsa_r2,o=ssl_corporation,l=houston,st=texas,c=us	(root)
cn=ssl.com_root_certification_authority_ecc,o=ssl_corporation,l=houston,st=texas,c=us	(root)
cn=ssl.com_root_certification_authority_rsa,o=ssl_corporation,l=houston,st=texas,c=us	(root)
cn=ssl.com_tls_ecc_root_ca_2022,o=ssl_corporation,c=us	(root)
cn=ssl.com_tls_rsa_root_ca_2022,o=ssl_corporation,c=us	(root)
cn=starfield_root_certificate_authority_-_g2,o=starfield_technologies__inc.,l=scottsdale,st=arizona,c=us	(root)
cn=starfield_services_root_certificate_authority_-_g2,o=starfield_technologies__inc.,l=scottsdale,st=arizona,c=us	(root)
cn=swisssign_gold_ca_-_g2,o=swisssign_ag,c=ch	(root)
cn=swisssign_rsa_tls_root_ca_2022_-_1,o=swisssign_ag,c=ch	(root)
cn=szafir_root_ca2,o=krajowa_izba_rozliczeniowa_s.a.,c=pl	(root)
cn=t-telesec_globalroot_class_2,ou=t-systems_trust_center,o=t-systems_enterprise_services_gmbh,c=de	(root)
cn=t-telesec_globalroot_class_3,ou=t-systems_trust_center,o=t-systems_enterprise_services_gmbh,c=de	(root)
cn=telekom_security_tls_ecc_root_2020,o=deutsche_telekom_security_gmbh,c=de	(root)
cn=telekom_security_tls_rsa_root_2023,o=deutsche_telekom_security_gmbh,c=de	(root)
cn=telia_root_ca_v2,o=telia_finland_oyj,c=fi	(root)
cn=teliasonera_root_ca_v1,o=teliasonera	(root)
cn=trustasia_global_root_ca_g3,o=trustasia_technologies__inc.,c=cn	(root)
cn=trustasia_global_root_ca_g4,o=trustasia_technologies__inc.,c=cn	(root)
cn=trustasia_tls_ecc_root_ca,o=trustasia_technologies__inc.,c=cn	(root)
cn=trustasia_tls_rsa_root_ca,o=trustasia_technologies__inc.,c=cn	(root)
cn=trustwave_global_certification_authority,o=trustwave_holdings__inc.,l=chicago,st=illinois,c=us	(root)
cn=trustwave_global_ecc_p256_certification_authority,o=trustwave_holdings__inc.,l=chicago,st=illinois,c=us	(root)
cn=trustwave_global_ecc_p384_certification_authority,o=trustwave_holdings__inc.,l=chicago,st=illinois,c=us	(root)
cn=tubitak_kamu_sm_ssl_kok_sertifikasi_-_surum_1,ou=kamu_sertifikasyon_merkezi_-_kamu_sm,o=turkiye_bilimsel_ve_teknolojik_arastirma_kurumu_-_tubitak,l=gebze_-_kocaeli,c=tr	(root)
cn=tuntrust_root_ca,o=agence_nationale_de_certification_electronique,c=tn	(root)
cn=twca_cyber_root_ca,ou=root_ca,o=taiwan-ca,c=tw	(root)
cn=twca_global_root_ca,ou=root_ca,o=taiwan-ca,c=tw	(root)
cn=twca_root_certification_authority,ou=root_ca,o=taiwan-ca,c=tw	(root)
cn=uca_extended_validation_root,o=unitrust,c=cn	(root)
cn=uca_global_g2_root,o=unitrust,c=cn	(root)
cn=usertrust_ecc_certification_authority,o=the_usertrust_network,l=jersey_city,st=new_jersey,c=us	(root)
cn=usertrust_rsa_certification_authority,o=the_usertrust_network,l=jersey_city,st=new_jersey,c=us	(root)
cn=vtrus_ecc_root_ca,o=itruschina_co._ltd.,c=cn	(root)
cn=vtrus_root_ca,o=itruschina_co._ltd.,c=cn	(root)
ou=ac_raiz_fnmt-rcm,o=fnmt-rcm,c=es	(root)
ou=certsign_root_ca,o=certsign,c=ro	(root)
ou=certsign_root_ca_g2,o=certsign_sa,c=ro	(root)
ou=epki_root_certification_authority,o=chunghwa_telecom_co.__ltd.,c=tw	(root)
ou=security_communication_rootca2,o=secom_trust_systems_co._ltd.,c=jp	(root)

📝 Chaining serial (144 chain(s))

Serial	Chain
0 (cn=go_daddy_root_certificate_authority_-_g2,o=godaddy.com__inc.,l=scottsdale,st=arizona,c=us)	(root)
0 (cn=hellenic_academic_and_research_institutions_ecc_rootca_2015,o=hellenic_academic_and_research_institutions_cert._authority,l=athens,c=gr)	(root)
0 (cn=hellenic_academic_and_research_institutions_rootca_2015,o=hellenic_academic_and_research_institutions_cert._authority,l=athens,c=gr)	(root)
0 (cn=starfield_root_certificate_authority_-_g2,o=starfield_technologies__inc.,l=scottsdale,st=arizona,c=us)	(root)
0 (cn=starfield_services_root_certificate_authority_-_g2,o=starfield_technologies__inc.,l=scottsdale,st=arizona,c=us)	(root)
0 (ou=security_communication_rootca2,o=secom_trust_systems_co._ltd.,c=jp)	(root)
1 (cn=t-telesec_globalroot_class_2,ou=t-systems_trust_center,o=t-systems_enterprise_services_gmbh,c=de)	(root)
1 (cn=t-telesec_globalroot_class_3,ou=t-systems_trust_center,o=t-systems_enterprise_services_gmbh,c=de)	(root)
1 (cn=tubitak_kamu_sm_ssl_kok_sertifikasi_-_surum_1,ou=kamu_sertifikasyon_merkezi_-_kamu_sm,o=turkiye_bilimsel_ve_teknolojik_arastirma_kurumu_-_tubitak,l=gebze_-_kocaeli,c=tr)	(root)
1 (cn=twca_root_certification_authority,ou=root_ca,o=taiwan-ca,c=tw)	(root)
110034b64ec6362d36	(root)
11d2bbb9d723189e405f0a9d2dd0df2567d1	(root)
11d2bbba336ed4bce62468c50d841d98e843	(root)
1302d5e2404c92468616675db4bbbbb26b3efc13	(root)
1403f5abfb378b17405be243b2a5d1c4	(root)
15448ef21fd97590df5040a	(root)
15c8bd65475cafb897005ee406d2bc9d	(root)
1615c7c3d849a7be690c8a88edf070f9ddb73e87	(root)
1675f27d6fe7ae3e4acbe095b059e	(root)
184accd6	(root)
194301ea20bddf5c5332ab1434471f8d6504d0d	(root)
1b70e9d2ffae6c71	(root)
1c18d8cfe5533f2235465354243c6c47d15c4a9c	(root)
1ebf5950b8c980374c06f7eb554fb5ed	(root)
1ed397095fd8b4b347701eaabe7f45b3	(root)
1f47afaa62007050544c019e9b63992a	(root)
1fd6d30fca3ca51a81bbc640e35032d	(root)
2 (cn=buypass_class_2_root_ca,o=buypass_as-983163327,c=no)	(root)
2 (cn=buypass_class_3_root_ca,o=buypass_as-983163327,c=no)	(root)
200605167002	(root)
203e57ef53f93fda50921b2a6	(root)
203e5936f31b01349886ba217	(root)
203e5aec58d04251aab1125aa	(root)
203e5b882eb20f825276d3d66	(root)
203e5c068ef631a9c72905052	(root)
212a560caeda0cab4045bf2ba22d3aea	(root)
219c542de8f6ec7177fa4ee8c3705797	(root)
21d6d04a4f250fc93237fcaa5e128de9	(root)
23f9c3d635af8f284b1ff054ea7e979d	(root)
2ac5c266a0b409b8f0b79f2ae462577	(root)
2c17087d642ac0fe85185906cfb44aeb	(root)
2c299c5b16ed0595	(root)
2dddacce629794a143e8b0cd766a5e60	(root)
2ef59b0228a7db7affd5a3a9eebd03a0cf126a1d	(root)
319721edaf89427f354187a167564c6d	(root)
31f5e4620c6c58edd6d8	(root)
33af1e6a711a9a0bb2864b11d09fae5	(root)
363a968cc95cb258cdd0015dc5e55700	(root)
3674e14d7c6513c9ac835525a03e527e2f5068c7	(root)
39ca931cef43f3c68e93c7f46489387e	(root)
3cf607a968700eda8b84	(root)
3d983ba6663d9063f77e26573804ef00	(root)
3e8a5d07ec55d232d5b7e3b65f01eb2ddce4d6e4	(root)
4000000000121585308a2	(root)
4001348cc200000000000000013cf2c6	(root)
41d29dd172eaeea780c12c6ce92f8752	(root)
42f2ccda1b6937445f15fe752810b8f4	(root)
43e37113d8b359145db7ce8cfd35fd6fbc058d45	(root)
43fa0c5f4e1b801844efd1b44f351f44f480edcb	(root)
444c0	(root)
445734245b81899b35f2ceb82b3b5ba726f07528	(root)
456b5054	(root)
45e6bb038333c3856548e6ff4551	(root)
49412ce40010	(root)
4a538c28	(root)
4caaf9cadb636fe01ff74ed85b03869d	(root)
4e812d8a8265e00b02ee3e350246e53d	(root)
4f2364b88e97639ec65381c1764ecb2a7415d6d7	(root)
4fd22b8ff564c8339e4f345866237060	(root)
509 (cn=quovadis_root_ca_2,o=quovadis_limited,c=bm)	(root)
53d5cfe619930bfb2b0512d8c22aa2a4	(root)
55556bcf25ea43535c3a40fd5ab4572	(root)
556f65e3b4d9906a1b09d16c3ec06c20	(root)
55a5d9679428c6ed0cfa27dd5b014d18	(root)
56b629cd34bc78f6	(root)
570a119742c4e3cc	(root)
59b1b579e8e2132e23907bda777755c	(root)
5a4bbd5afb4f8a5bfa65e5	(root)
5c33cb622c5fb332	(root)
5c6 (cn=quovadis_root_ca_3,o=quovadis_limited,c=bm)	(root)
5c8b99c55a94c5d27156decd8980cc26	(root)
5d938d306736c8061d1ac754846907	(root)
5ddfb1da5aa3ed5dbe5a6520650390ef	(root)
5ec3b7a6437fa4e0	(root)
5f0241d77a877c4c03a3ac968dfbffd0	(root)
5f70e86da49f346352ebab2	(root)
605949e0262ebb55f90a778a71f94ad86c	(root)
62533b1470333275cf98d9ab9bfccf8	(root)
62f6326ce5c4e3685c1b62dd9c2e9d95	(root)
64db5a0c204ee8d72977c85027a25a27dd2df2cb	(root)
64f60e6577616aab3bb4ea8584bbb189b871930f	(root)
66c9fcf99bf8c0a39e2f0788a43e696365bca	(root)
66c9fd29635869f0a0fe58678f85b26bb8a37	(root)
66c9fd5749736663f3b0b9ad9e89e7603f24a	(root)
66c9fd7c1bb104c2943e5717b7b2cc81ac10e	(root)
66f23daf87de8bb14aea0c573101c2ec	(root)
66f9c7c1afecc251b4ed5397e6e682c32b1c9016	(root)
67749d8d77d83b6adb22f4ff59e2bfce	(root)
6926097e804b4ca0a78c7862535f5a6f	(root)
6d8c1446b1a60aee	(root)
6e6abc59aa53be983967a2d26ba43be66d1cd6da	(root)
6fbedaad73bd0840e28b4dbed4f75b91	(root)
733b3004485bd94d782e734bc9a1dc66	(root)
7497258ac73f7a54	(root)
75622a4e8d48a894df413c8f0f8eaa5	(root)
758dfd8bae7c0700faa925a7e1c7ad14	(root)
75e6dfcbc1685ba8	(root)
76b1205274f0858746b3f8231af6c2c0	(root)
7777062726a9b17c	(root)
78585f2ead2c194be3370735341328b596d46593	(root)
788f275c81125220a504d02dddba73f4	(root)
7b2c9bd316803299	(root)
7b71b68256b8127c9ca8	(root)
7c4f04391cd4992d	(root)
7cc98f2b84d7dfea0fc9659ad34b4d96	(root)
7d0997fef047ea7a	(root)
8165f8a4ca5ec00c99340dfc4c6ae23b81c5aa4	(root)
8210cfb0d240e3594463e0bb63828b00	(root)
83be056904246b1a1756ac95991c74a	(root)
8bd85976c9927a48068473b	(root)
8e0ff94b907168653354f4d44439b7e0	(root)
8f9b478a8fa7eda6a333789de7ccf8a	(root)
92b888dbb08ac163	(root)
95be16a0f72e46f17b398272fa8bcd96	(root)
983f3	(root)
983f4	(root)
9e09365acf7d9c8b93e1c0b042a2ef3	(root)
a0142800000014523c844b500000002	(root)
a0142800000014523cf467c00000002	(root)
a68b79290000000050d091f9	(root)
aecf00bac4cf32f843b2	(root)
b0b75a16485fbfe1cbf58bd719e67d	(root)
b931c3ad63967ea6723bfc3af9af44b	(root)
ba15afa1ddfa0b54944afcd24a06cec	(root)
bb401c43f55e4fb0	(root)
c27e43044e473f19	(root)
cae91b89f155030da3e6416dc4e3a6e1	(root)
cbe (cn=twca_global_root_ca,ou=root_ca,o=taiwan-ca,c=tw)	(root)
ce7e0e517d846fe8fe560fc1bf03039	(root)
cf08e5c0816a5ad427ff0eb271859d0	(root)
d65d9bb378812eeb	(root)
d6a5f083f285c3e5195df5d	(root)
dd3e3bc6cf96bb1	(root)
fedce3010fc948ff	(root)

⚠️ Warnings (18)

⚠️ Warning: Certificate 4 Alias: c=es,o=accv,ou=pkiaccv,cn=accvraiz1 Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 8 Alias: cn=affirmtrust_networking,o=affirmtrust,c=us Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 24 Alias: cn=certigna,o=dhimyotis,c=fr Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 27 Alias: cn=certum_trusted_network_ca,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 31 Alias: cn=comodo_certification_authority,o=comodo_ca_limited,l=salford,st=greater_manchester,c=gb Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 40 Alias: cn=digicert_assured_id_root_ca,ou=www.digicert.com,o=digicert_inc,c=us Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 43 Alias: cn=digicert_global_root_ca,ou=www.digicert.com,o=digicert_inc,c=us Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 46 Alias: cn=digicert_high_assurance_ev_root_ca,ou=www.digicert.com,o=digicert_inc,c=us Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 55 Alias: cn=entrust_root_certification_authority,ou=(c)_2006_entrust__inc.,ou=www.entrust.net/cps_is_incorporated_by_reference,o=entrust__inc.,c=us Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 93 Alias: cn=quovadis_root_ca_2,o=quovadis_limited,c=bm Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 95 Alias: cn=quovadis_root_ca_3,o=quovadis_limited,c=bm Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 99 Alias: cn=secure_global_ca,o=securetrust_corporation,c=us Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 103 Alias: cn=securetrust_ca,o=securetrust_corporation,c=us Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 113 Alias: cn=swisssign_gold_ca_-_g2,o=swisssign_ag,c=ch Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 121 Alias: cn=teliasonera_root_ca_v1,o=teliasonera Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 133 Alias: cn=twca_root_certification_authority,ou=root_ca,o=taiwan-ca,c=tw Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 141 Alias: ou=certsign_root_ca,o=certsign,c=ro Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.
⚠️ Warning: Certificate 143 Alias: ou=epki_root_certification_authority,o=chunghwa_telecom_co.__ltd.,c=tw Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.

❌ Errors (4)

❌ Error: Certificate 28 Alias: cn=certum_trusted_network_ca_2,ou=certum_certification_authority,o=unizeto_technologies_s.a.,c=pl Detail: uses the sha512 signature algorithm, which requires manual verification for this environment.
❌ Error: Certificate 29 Alias: cn=certum_trusted_root_ca,ou=certum_certification_authority,o=asseco_data_systems_s.a.,c=pl Detail: uses the sha512 signature algorithm, which requires manual verification for this environment.
❌ Error: Certificate 35 Alias: cn=d-trust_br_root_ca_2_2023,o=d-trust_gmbh,c=de Detail: uses the sha512 signature algorithm, which requires manual verification for this environment.
❌ Error: Certificate 37 Alias: cn=d-trust_ev_root_ca_2_2023,o=d-trust_gmbh,c=de Detail: uses the sha512 signature algorithm, which requires manual verification for this environment.