Entrust Certificate Services Subordinate CAs

- Solutions
  - Strong Identities
    1. Identity Verification
      Enable high assurance identities that empower citizens.
    2. ID Issuance
      Issue safe, secure digital and physical IDs in high volumes or instantly.
    3. User Identity
      Elevate trust by protecting identities with a broad range of authenticators.
    4. Machine Identity
      Issue and manage strong machine identities to enable secure IoT and digital transformation.
    5. Digital Signature
      Use secure, verifiable signatures and seals for digital documents.
  - Secure Payments
    1. Financial Issuance
      Issue digital and physical financial identities and credentials instantly or at scale.
    2. Digital Card Solution
      Issue digital payment credentials directly to cardholders from your bank's mobile app.
  - Trusted Infrastructure
    1. Post-Quantum Cryptography
      Find, assess, and prepare your cryptographic assets for a post-quantum world.
    2. Database Security
      Secure databases with encryption, key management, and strong policy and access control.
    3. Multi-cloud Security
      Keys, data, and workload protection and compliance across hybrid and multi-cloud environments.
- Industry
- Compliance
  - 1. PSD2
    2. HIPAA
    3. GDPR
    4. Swift
  - 1. CMMC
    2. eIDAS
    3. NITES
- Featured Products
  - As a Service Products
    1. Identity Verification as a Service
      Citizen verification for immigration, border management, or eGov service delivery.
    2. Identity as a Service (IDaaS)
      Cloud-based Identity and Access Management solution.
    3. Digital Signing as a Service
      Cloud-based digital signing solutions.
    4. Instant ID as a Service
      Issue physical and mobile IDs with one secure platform.
  - 1. Digital Card Solution
      Instantly provision digital payment credentials directly to cardholder’s mobile wallet.
    2. PKI as a Service
      A highly secure PKI that’s quick to deploy, scales on-demand, and runs where you do business.
    3. nShield as a Service
      Subscription-based access to dedicated nShield HSMs for cloud-based cryptographic services.
    4. Seamless Travel as a Service
      Remote identity verification, digital travel credentials, and touchless border processes.
  - 1. Instant Financial Issuance
      In-branch and self-service kiosk issuance of debit and credit cards.
    2. Central Financial Issuance
      High volume financial card issuance with delivery and insertion options.
    3. Instant ID Issuance
      Secure issuance of employee badges, student IDs, membership cards and more.
    4. Central ID Issuance
      Passports, national IDs and driver licenses.
    5. nShield HSMs
      Securely generate encryption and signing keys, create digital signatures, encrypting data and more.
  - 1. Cloud Security, Encryption and Key Management
      Powerful encryption, policy, and access control for virtual and public, private, and hybrid cloud environments.
    2. Digital Certificates
      TLS/SSL, digital signing, and qualified certificates plus services and tools for certificate lifecycle management.
    3. Identity and Access Management (IAM)
      One Identity portfolio for all your users — workforce, consumers, and citizens.
    4. Machine Identity Management
      Centralized visibility, control, and management of machine identities.
    5. Post-Quantum
      Learn what steps to take to migrate to quantum-resistant cryptography.
- Enterprise ID & Issuance
  - Instant ID as a Service
    Issue physical and mobile IDs with one secure platform.
    Learn More
  - Instant Issuance
    1. Sigma Direct-to-Card System
    2. Artista Retransfer System
    3. System Software
      Personalization, encoding and activation.
    4. Supplies
    5. Services
- Financial ID & Issuance
  - Digital Card Solution
    Instantly provision digital payment credentials directly to cardholder’s mobile wallet.
    Learn More
  - Digital Banking
    1. Digital Account Opening
    2. Digital Card Solution
  - Instant Issuance
    1. Sigma Direct-to-Card System
    2. Artista Retransfer System
    3. System Software
      Personalization, encoding and activation.
    4. Supplies
    5. Services
  - Central Issuance
    1. Card Issuance Systems
    2. Inline Card Delivery Systems
    3. Inline Envelope Insertion Systems
    4. Standalone Card Affixing/Envelope Insertion Systems
    5. Standalone Envelope Insertion Systems
    6. System Software
      Personalization, encoding, delivery and analytics.
    7. Supplies
    8. Services
- Government ID & Issuance
  - Digital Citizen
    1. eGovernment service delivery
    2. Identity Verification as a Service
    3. Seamless Travel as a Service
    4. ePassport as a Service
  - Central Issuance
    1. Passports, national IDs and driver licenses.
    2. Passport Issuance Systems
    3. National ID and Driver License Systems
    4. Inline Delivery & Insertion
    5. Standalone Delivery & Insertion
    6. System Software
      ID Personalization, encoding and delivery.
    7. Supplies
    8. Services
  - Instant Issuance
    1. Other citizen IDs and licenses.
    2. Sigma Direct-to-Card System
    3. Artista Retransfer System
    4. System Software
      Personalization, encoding, delivery and analytics.
    5. Supplies
    6. Services
  - Identity Verification as a Service
    Our IDVaaS solution allows remote verification of an individual’s claimed identity for immigration, border management, or digital services delivery.
    Learn More
- Cloud Security Posture Management
  - 1. CloudControl Enterprise for AWS
      Secure and ensure compliance for AWS configurations across multiple accounts, regions and availability zones.
    2. CloudControl Enterprise for Containers
      Security compliance and environmental hardening solution for contains and Kubernetes using VMware Tanzu and RedHat OpenShift platforms.
    3. CloudControl Enterprise for Swift
      Meet the compliance requirements for Swift’s Customer Security Program while protecting virtual infrastructure and data.
    4. CloudControl Enterprise for vSphere and NSX
      Comprehensive compliance, multi-factor authentication, secondary approval, RBAC for VMware vSphere NSX-T and VCF.
    5. CloudControl Foundation for vSphere
      Comprehensive compliance for VMware vSphere, NSX-T and SDDC and associated workload and management domains
  - CloudControl 30-Day Free Trial
    Entrust CloudControl offers comprehensive security and automated compliance across virtualization, public cloud, and container platforms while increasing visibility and decreasing risks that can lead to unintended downtime or security exposure.
    Start Free Trial
- Key Management and Encryption
  - 1. KeyControl for KMIP and Secrets
      Manage all your secrets and encryption keys, including how often you rotate and share them, securely at scale.
    2. KeyControl BYOK
      Create and manage encryption keys on premises and in the cloud. Manage your key lifecycle while keeping control of your cryptographic keys.
    3. KeyControl for Database Encryption
      Integrates with your database for secure lifecycle management of your TDE encryption keys.
    4. KeyControl for Backup and Recovery
      Integrates with your backup and recovery solution for secure lifecycle management of your encryption keys.
  - 1. DataControl for Azure
      Data encryption, multi-cloud key management, and workload security for Azure.
    2. DataControl for AWS
      Data encryption, multi-cloud key management, and workload security for AWS.
    3. DataControl for IBM Cloud
      Data encryption, multi-cloud key management, and workload security for IBM Cloud.
  - KeyControl 30-Day Free Trial
    VMware vSphere and vSAN encryption require an external key manager, and KeyControl is VMware Ready certified and recommended. KeyControl enables enterprises to easily manage all their encryption keys at scale, including how often keys are rotated, and how they are shared securely.
    Start Free Trial
- Hardware Security Modules (HSM)
  - nShield as a Service
    1. Subscription-based access to dedicated nShield Cloud HSMs.
  - nShield HSMs
    1. nShield Connect
      Networked appliances that deliver cryptographic key services to distributed applications.
    2. nShield Solo
      PCI-Express card-based HSMs.
    3. nShield Edge
      Personal, USB-connected desktop HSMs.
  - Management and Monitoring
    1. nShield Monitor
    2. nShield Remote Administration
  - CodeSafe
    1. SDK for securing sensitive code within a FIPS 140-2 Level 3 certified nShield HSM.
    2. Post-Quantum SDK
  - Software Option Packs
  - Compliance and Certification
    1. FIPS 140-2/140-3
    2. Common Criteria
    3. eIDAS
    4. NIST 800-53
    5. GDPR
    6. PSD2
    7. HIPAA
    8. PCI-DSS
    9. NITES
  - Why you need an HSM
    1. Learn about all the details related to what hardware security modules offer you in security and cost savings...
    2. Learn More
  - Use Cases
- TLS/SSL Certificates
  - BUY NOW
    1. Buy Certificates
    2. Renew Certificates
  - TLS/SSL Certificates
  - Qualified Certificates
  - Sales and Services
- Identity and Access Management (IAM)
  - Products
    1. Identity as a Service
      Cloud-Based IAM
    2. Identity Enterprise
      On-prem IAM
    3. Identity Essentials
      On-prem MFA solution for Windows users
    4. APIs and SDKs
  - Integrations
  - Testimonials
  - Workforce
  - Consumer and Citizen
  - Get Entrust Identity as a Service Free for 60 Days
    Explore the Identity as a Service platform that gives you access to best-in-class MFA, SSO, adaptive risk-based authentication, and a multitude of advanced features that not only keep users secure, but also contribute to an optimal experience.
    Start Free Trial
- Electronic and Digital Signing
  - EU Qualified Trust Services
    In addition to our long-standing Adobe Approved Trust List (AATL) membership, we are a European Qualified Trust Service Provider for the issuance of eIDAS qualified certificates for qualified signatures and advanced seals, for PSD2 certificates and for QWACs
    Learn More
  - Cloud-Based Signing Portal
    1. Signhost is a high-assurance, identity-verified electronic signature service.
    2. Get Started for Free
  - Digital Signing as a Service
  - Digital Signing Certificates
  - Digital Signing Infrastructure
- Public Trust Certificates
  - Verified Mark Certificates (VMCs) for BIMI
    Show your official logo on email communications. Download our white paper to learn all you need to know about VMCs and the BIMI standard.
    Learn More
  - Buy and Renew TLS/SSL Certificates
    1. Buy Certificates
    2. Renew Certificates
  - Signing Certificates
  - Qualified Certificates
    1. PSD2 Qualified Electronic Seal Certificates
  - Sales and Services
- Public Key Infrastructure (PKI)
  - PKI as a Service
    1. Use Cases
    2. Post-Quantum PKIaaS
  - PKI Products
  - Managed Services
  - Certificate Lifecycle Management
  - Cryptographic Center of Excellence
    1. PKI Health Check
    2. Cryptographic Health Check
  - Try Post-Quantum PKI as a Service Now
    Get PQ Ready. PKIaaS PQ provides customers with composite and pure quantum Certificate Authority hierarchies.
    Try Now
- Internet of Things (IoT) Security
  - Credentialing and Provisioning
  - Machine Identity Management
  - Global PKI IoT Trends Study
    Find out how organizations are using PKI and if they’re prepared for the possibilities of a more secure, connected world.
    Learn More
- Machine Identity Management
  - Lifecycle Management
  - Credentialing and Provisioning
  - The State of Machine Identity Management
    A recent survey by IDG uncovered the complexities around machine identities and the capabilities that IT leaders are seeking from a management solution.
    Get the White Paper
- Post-Quantum
  - Issuance and Provisioning
    1. PKI as a Service PQ
    2. PQ Standards and Research
  - Cryptographic Center of Excellence
    1. Crypto Health Check
    2. PKI Health Check
  - Are you ready for the threat of post-quantum computing?
    Know where your path to post-quantum readiness begins by taking our assessment.
    Begin Assessment
- Partners
  - Become an Entrust Partner
    Our partner programs can help you differentiate your business from the competition, increase revenues, and drive customer loyalty. Consider joining one or more of our Entrust partner programs and strategically position your company and brand in front of as many potential customers as possible.
    Learn More
  - Partner Directory
    Search for partners based on location, offerings, channel or technology alliance partners.
    Search for a Partner
  - Programs
  - Partner Logins
- Support & Services
  - Contact Support
  - TrustedCare
    Product downloads, technical support, marketing development funds.
    Learn More
  - Digital Security Knowledge Base
    Guides, white papers, installation help, FAQs and certificate services tools.
    Learn More
  - Issuance Systems Knowledge Base
    Technotes, product bulletins, user guides, product registration, error codes and more.
    Learn More
  - PKI Professional Services
  - Cryptographic Center of Excellence
    Construct best practices and define strategies that work across your unique IT environment.
    Learn More
  - Custom Cryptographic Solutions
    1. Code Signing
    2. HSM Application Integration
  - Product Deployment Services
  - Packaged Services
  - Training
- Resources
  - Issuance Systems Knowledge Base
    Technotes, product bulletins, user guides, product registration, error codes and more.
    Learn More
  - Digital Security Knowledge Base
    Guides, white papers, installation help, FAQs and certificate services tools.
    Learn More
  - Cybersecurity Institute
    Get critical insights and education on security concepts from our Trust Matters newsletter, explainer videos, and the Cybersecurity Institute Podcast.
    Learn More
- About Entrust
  - Securing a World in Motion Since 1969
    We’ve established secure connections across the planet and even into outer space. We’ve enabled reliable debit and credit card purchases with our card printing and issuance technologies. Protected international travel with our border control solutions. Created secure experiences on the internet with our SSL technologies. And safeguarded networks and devices with our suite of authentication products.
    Explore Our History
  - 1. Leadership
    2. Blog
    3. Careers
    4. Events
    5. Webinars
    6. Podcasts
    7. News Articles
    8. Press Releases
  - Cybersecurity Institute
    Get critical insights and education on security concepts from our Trust Matters newsletter, explainer videos, and the Cybersecurity Institute Podcast.
    Learn More
- Shop
  - Entrust Certificate Services Portal
    Existing Entrust Certificate Services customers can login to issue and manage certificates or buy additional services.
    Learn More
  - Entrust Certificate Services Retail
    Shop for new single certificate purchases.
    Learn More
  - Entrust Certificate Services Partner Portal
    Existing partners can provision new customers and manage inventory.
    Learn More
  - Instant Financial Card Issuance Supplies
    1. Registered Customer Login
    2. Request Access
- Search Entrust
  - Search:

Entrust Subordinate Certificates

Public Trust Subordinate CAs

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Enterprise Intermediate CA-ICA1	RSA 2048, SHA-256	SHA-1: CF9124E4B855E5CF0C75EC77C8801331DA162A8 SHA-256: C54D8B12C438725C2755B4AD81825F6975CBDA6C258A2BFBB8247A14F03BD22A	July 7, 2029	CRT CRL
Entrust Class 1 Client CA - SHA256	RSA 2048, SHA-256	SHA-1: 67:c9:31:42:6a:df:1a:08:a7:2a:5d:d0:15:18:82:98:9b:a0:3d:2e SHA-256: C6:E9:E9:93:C2:58:B7:21:24:AA:D3:C9:C0:68:B6:EF:23:57:61:55:F3:10:B3:05:73:33:61:E2:0B:17:C9:43	November 16, 2030	CRT CRL
Entrust Class 2 Client CA	RSA 2048, SHA-256	SHA-1: ‎13:13:ed:8d:ee:e9:49:d9:14:5f:7e:eb:f1:3d:c2:41:be:30:8a:b5 SHA-256: 1A:20:FE:F4:64:82:A9:8B:AC:6F:6C:73:97:C0:17:31:0A:C7:FB:78:49:54:38:BC:7A:7D:E9:03:5C:24:66:79	June 29, 2029	CRT CRL
Entrust Class 2 Client CA - C2CA2	RSA 2048, SHA-256	SHA-1: 0b b7 87 33 8e 59 21 fe 17 20 e4 10 8b 17 0c af 4d fb ef dc SHA-256: B1 4C F5 50 D8 F5 73 D9 3E 90 96 3C 32 A8 5F B5 1C 98 3C 98 16 4F 54 D7 89 15 F6 35 8C 95 4F 0E	July 16, 2029	CRT CRL
Entrust Class 3 Client CA - SHA256	RSA 2048, SHA-256	SHA-1: ‎fb 73 ee b6 f4 1f f3 2e b5 dc eb 6c c1 a6 f0 46 a6 06 b5 4d SHA-256: 33:85:73:38:36:1E:CF:C4:85:8D:DF:F6:B9:EF:62:73:E3:DB:85:6A:B9:CE:A1:C0:E2:C6:59:25:D1:C8:79:78	June 25, 2029	CRT CRL
Entrust Certification Authority - L1E	RSA 2048, SHA-256	SHA-1: ‎62:37:8c:89:2f:dd:53:75:7c:91:84:cf:4e:11:be:ec:da:25:16:03 SHA-256: 23:2F:63:67:CF:56:1E:00:C8:3E:18:0A:9F:CA:85:46:B3:77:1F:B4:50:EB:CB:4A:05:26:F8:34:9C:8C:A1:39	November 19, 2026	CRT CRL
Entrust Certification Authority - L1F	ECC P-384, SHA-384	SHA-1: ‎ 63 12 cf 0d a9 10 2f 52 63 d3 84 0f 07 4a 76 ab f0 30 1e be SHA-256: 18:35:B0:E4:82:EA:65:53:6F:C0:10:E4:BC:13:C0:60:F6:56:68:16:5F:BA:97:E2:F5:42:CE:96:CA:6D:FE:FC	October 5, 2037	CRT CRL
Entrust Certification Authority - L1J	ECC P-384, SHA-384	SHA-1: ‎ 33 ff fe 4a 9a 16 91 e5 3e fa 15 68 eb 74 3a 69 d8 b5 2e ad SHA-256: 34:47:B7:4B:5E:50:0A:54:99:83:FA:2C:ED:73:A5:64:2E:6A:AE:C7:88:29:54:61:58:43:7D:F6:6D:74:35:B8	October 5, 2037	CRT CRL
Entrust Certification Authority - L1K	RSA 2048, SHA-256	SHA-1: ‎f2 1c 12 f4 6c db 6b 2e 16 f0 9f 94 19 cd ff 32 84 37 b2 d7 SHA-256: 13:EF:B3:9A:2F:66:54:E8:C6:7B:D0:4F:4C:6D:4C:90:CD:6C:AB:50:91:BC:ED:C7:37:87:F6:B7:7D:3D:3F:E7	December 5, 2030	CRT CRL
Entrust Certification Authority - L1M	RSA 2048, SHA-256	SHA-1: ‎ cc 13 66 95 63 90 65 fa b4 70 74 d2 8c 55 31 4c 66 07 7e 90 SHA-256: 75:C5:B3:F0:1F:D1:F5:1A:2C:44:7A:B7:C7:85:D7:2E:69:FA:9C:47:2C:08:57:1E:7E:AD:F3:B8:EA:BA:E7:0C	October 15, 2030	CRT CRL
Entrust Certification Authority - L1N	RSA 2048, SHA-256	SHA-1: ‎c6 08 03 66 08 32 fe 58 fc a6 24 04 7f fd 28 a7 6a 46 52 35 SHA-256: B1:4D:50:89:07:9C:1D:8F:76:49:DB:9A:5D:3C:EF:B1:AA:C0:6F:66:AF:C4:92:25:C5:BE:2A:A1:9F:D4:1A:35	December 22, 2030	CRT CRL
Entrust Extended Validation Code Signing CA - EVCS2	RSA 4096, SHA-256	SHA-1: ‎B52063CECFFAFA24B57993B8EFE7FB1E4D6D56B SHA-256: 6510DC50A0D17DC438C2A85D738F558582B6C25361884F3882E207A51F4ED152	November 10, 2030	CRT CRL
Entrust Code Signing CA - OVCS2	RSA 2048, SHA-256	SHA-1: ‎ A61DC5D90A06003EB4DD3599B7A052FC3F70D7CC SHA-256: 95F843046BAC035572A3BA1B821DF8B759467F5B512DDFA8A72F0799447D6368	November 10, 2030	CRT CRL
Entrust Timestamping CA - TS1	RSA 2048, SHA-256	SHA-1: ‎58 c7 1a 4a e6 3e 76 8c a5 10 c5 4e b7 a0 6e 30 ef 8e 42 e9 SHA-256: 44:DF:CD:2C:57:31:10:E7:4B:F4:E8:59:03:59:5F:66:06:50:ED:92:5B:73:06:54:2C:54:E8:73:96:67:1F:03	June 22, 2029	CRT CRL
Entrust Timestamping CA - TS2	RSA 4096, SHA-512	SHA-1: 78491BAB39CF2D94D23D219C0D1EB279B16C61D SHA-256: 21E81685B352955B9ED48FB969BD2E4F95CFB85ED1260CF6B7FA70A035D0028F	December 29, 2040	CRT CRL
Entrust Certification Authority - ES QWAC2	RSA 2048, SHA-256	SHA-1: 85e3ea4172fa5e35617f9416a054385e8a6d3094 SHA-256: C97F2F6E6A8ADB6ECFE4978F08CA8F6F0123A94784522B610ADF6AB51439FC62	November 30, 2030	CRT CRL
Entrust Certification Authority - ES QSeal2	RSA 4096, SHA-512	SHA-1: 3e50bd2368795d9b54d134d0e295fabf28fbcc7a SHA-256: 8C31D9375128D4B107F07678EEBFFF2CCA26A4CABB462F257F31A36FE7BCE104	December 28, 2040	CRT CRL
Entrust Certification Authority - ES QTS1	RSA 4096, SHA-256	SHA-1: 8820FD7CDF5CAD3077A3704253CB3D10A1E43B52 SHA-256: 253F463FB19E06D188A1F81AB6A3CA78C9352B08DC94DD74CF05336809363812	December 28, 2040	CRT CRL
Entrust Certification Authority - ES QSig2	RSA 4096, SHA-512	SHA-1: 9ee1c8b9fcd17211cf15c0a71b0d09c9980c1abe SHA-256: 4671FDEAD3C5B32D834B36591D41496FCB8A0DB7D4F9F4CB9D34EABE0947EE87	December 28, 2040	CRT CRL
Entrust Verified Mark CA - VMC2	RSA 4096, SHA-512	SHA-1: 304DB1D13061F97C616752D04AE7F3AC147D60ED SHA-256: C269504B491DBF451A695B953711ADC5CD70975B5FCA1E181EBBD2172CB07E0C	December 30, 2040	CRT CRL

Time-stamp Authorities

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Timestamp Authority - TSA1	RSA 4096, SHA-256	SHA-1: 63064AAB6177F9AA44BDFB6FDFA6AC1A9AACDEC0 SHA-2: EE6119ABBA9DC5BB8C2C81BEF9BEEE8E0E25FDD85EB3F1A635352681D9B68BAF	December 31, 2028	CRT
Entrust Timestamp Authority - TSA2	RSA 4096, SHA-512	SHA-1: 291D1BF682D27FD5E49083C7F9772BB4BBFAB34C SHA-2: 7AD12B0C615549B7CC21BA714EA79F412F1B35B927D365AFE98F2027715C0B63	November 31, 2028	CRT
Entrust Qualified Time Stamping Authority - QTSA1	RSA 4096, SHA-256	SHA-1: 805F38F9DB4212275209712D45893A5E4D5CD21B SHA-2: E9371C0CC24BEB13E687042D2145C212F80B4EA27FBF55C746DE149521C3247A	October 2, 2025	CRT

Public Trust Subordinate CAs

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Certification Authority - L1H	RSA 2048, SHA-256	SHA-1: 123fb67b9f148cd048e29ec6302fa6ed0629e08a	December 6, 2030	CRT CRL
Entrust Certification Authority - L1R	RSA 2048, SHA-256	SHA-1: 477df10752e5acdb45936824e4be360251ddb0fc	November 18, 2024	CRT CRL
Entrust Private Trust SSL CA - PrivSSL1	RSA 2048, SHA-256	SHA-1: 00a509ccf1ff20c47a13ac5e29d170bc75f45357	December 17, 2030	CRT CRL

PLEASE NOTE: In some cases, a Subordinate CA has been issued more than one certificate. This posting lists the last Subordinate CA certificate issued.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll-free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or Click Here for global Numbers)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as a UITF toll-free call.