Entrust Certificate Services Subordinate CAs

- Solutions
  - Strong Identities
    1. Identity Verification
      Enable high assurance identities that empower citizens.
    2. ID Issuance
      Issue safe, secure digital and physical IDs in high volumes or instantly.
    3. User Identity
      Elevate trust by protecting identities with a broad range of authenticators.
    4. Machine Identity
      Issue and manage strong machine identities to enable secure IoT and digital transformation.
    5. Digital Signature
      Use secure, verifiable signatures and seals for digital documents.
  - Secure Payments
    1. Financial Issuance
      Issue digital and physical financial identities and credentials instantly or at scale.
    2. Digital Card Solution
      Issue digital payment credentials directly to cardholders from your bank's mobile app.
  - Digital Infrastructure
    1. Database Security
      Secure databases with encryption, key management, and strong policy and access control.
    2. Multi-cloud Security
      Secure encryption keys, containers, and data across multi-cloud. environments.
- Industry
- Compliance
  - 1. PSD2
    2. HIPAA
    3. GDPR
  - 1. CMMC
    2. eIDAS
- Cloud Security, Encryption, and Key Management
  - Cloud Security Posture Management
  - Multi-Cloud Encryption
  - Key Management
- Digital Certificates
  - TLS/SSL Certificates
  - Qualified Certificates
  - Sales and Services
  - Verified Mark Certificate (VMC) for BIMI
    Show your official logo on email communications. Download our white paper to learn all you need to know about VMCs and the BIMI standard.
    Learn More
- Digital Signing
  - Digital Signing as a Service
    1. Signing Automation Service
    2. Remote Signing Service
  - Signing Certificates
  - Signing Servers
- Hardware Security Modules (HSM)
  - nShield HSMs
    1. nShield Connect
      Networked appliances that deliver cryptographic key services to distributed applications.
    2. nShield Edge
      Personal, USB-connected desktop HSMs.
    3. nShield Solo
      PCI-Express card-based HSMs.
    4. nShield as a Service
      Subscription-based access to dedicated nShield HSMs.
    5. nShield HSMi
  - nShield Software
  - Management and Monitoring
    1. nShield Monitor
    2. nShield Remote Administration
  - Compliance
    1. FIPS 140-2
    2. GDPR
    3. PSD2
    4. NIST 800-53 Fedramp
    5. Common Criteria
    6. eIDAS
    7. HIPAA
    8. PCI-DSS
    9. Americas
    10. EMEA
    11. APAC
    12. Global
  - Use Cases
  - 1. View All Use Cases
- Identity and Access Management (IAM)
  - Products
    1. Identity as a Service
      Cloud-Based IAM
    2. Identity Enterprise
      On-prem IAM
    3. Identity Essentials
      On-prem MFA solution for Windows users
  - Testimonials
  - Portfolio Capabilities
  - Workforce Identities
  - For Consumers and Citizens
- Public Key Infrastructure (PKI)
  - Products
  - Managed Services
- Central Issuance
  - Financial Cards
  - Government Cards
- Instant Issuance
  - Financial Cards
  - ID Cards
- Passport issuance
  - Passports
  - Try Our Passport Credential Builder
    Learn More
- Partners
  - Become an Entrust Partner
    Our partner programs can help you differentiate your business from the competition, increase revenues, and drive customer loyalty. Consider joining one or more of our Entrust partner programs and strategically position your company and brand in front of as many potential customers as possible.
    Learn More
  - Partner Directory
    Search for partners based on location, offerings, channel or technology alliance partners.
    Search for a Partner
  - Programs
  - Partner Logins
- Support & Services
  - Contact Support
  - TrustedCare
    Product downloads, technical support, marketing development funds.
    Learn More
  - Digital Security Knowledge Base
    Guides, white papers, installation help, FAQs and certificate services tools.
    Learn More
  - Issuance Systems Knowledge Base
    Technotes, product bulletins, user guides, product registration, error codes and more.
    Learn More
  - PKI Professional Services
  - Cryptographic Center of Excellence
    Construct best practices and define strategies that work across your unique IT environment.
    Learn More
  - Custom Cryptographic Solutions
    1. Code Signing
    2. HSM Application Integration
  - Product Deployment Services
  - Packaged Services
  - Training
- Resources
  - Issuance Systems Knowledge Base
    Technotes, product bulletins, user guides, product registration, error codes and more.
    Learn More
  - Digital Security Knowledge Base
    Guides, white papers, installation help, FAQs and certificate services tools.
    Learn More
- About Entrust
  - Securing a World in Motion Since 1969
    We’ve established secure connections across the planet and even into outer space. We’ve enabled reliable debit and credit card purchases with our card printing and issuance technologies. Protected international travel with our border control solutions. Created secure experiences on the internet with our SSL technologies. And safeguarded networks and devices with our suite of authentication products.
    Explore Our History
  - 1. Leadership
    2. Blog
    3. Careers
    4. Events
    5. Webinars
    6. Podcasts
    7. News Articles
    8. Press Releases
  - Cybersecurity Institute
    Get critical insights and education on security concepts from our Trust Matters newsletter, explainer videos, and the Cybersecurity Institute Podcast.
    Learn More
- Shop
  - Entrust Certificate Services Portal
    Existing Entrust Certificate Services customers can login to issue and manage certificates or buy additional services.
    Learn More
  - Entrust Certificate Services Retail
    Shop for new single certificate purchases.
    Learn More
  - Entrust Certificate Services Partner Portal
    Existing partners can provision new customers and manage inventory.
    Learn More
  - Instant Financial Card Issuance Supplies
    1. Registered Customer Login
    2. Request Access
- Search Entrust
  - Search:

Entrust Subordinate Certificates

Public Trust Subordinate CAs

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Enterprise Intermediate CA-ICA1	RSA 2048, SHA-256	SHA-1: CF9124E4B855E5CF0C75EC77C8801331DA162A8 SHA-256: C54D8B12C438725C2755B4AD81825F6975CBDA6C258A2BFBB8247A14F03BD22A	July 7, 2029	CRT CRL
Entrust Class 1 Client CA - SHA256	RSA 2048, SHA-256	SHA-1: 67:c9:31:42:6a:df:1a:08:a7:2a:5d:d0:15:18:82:98:9b:a0:3d:2e SHA-256: C6:E9:E9:93:C2:58:B7:21:24:AA:D3:C9:C0:68:B6:EF:23:57:61:55:F3:10:B3:05:73:33:61:E2:0B:17:C9:43	November 16, 2030	CRT CRL
Entrust Class 2 Client CA	RSA 2048, SHA-256	SHA-1: ‎13:13:ed:8d:ee:e9:49:d9:14:5f:7e:eb:f1:3d:c2:41:be:30:8a:b5 SHA-256: 1A:20:FE:F4:64:82:A9:8B:AC:6F:6C:73:97:C0:17:31:0A:C7:FB:78:49:54:38:BC:7A:7D:E9:03:5C:24:66:79	June 29, 2029	CRT CRL
Entrust Class 2 Client CA - C2CA2	RSA 2048, SHA-256	SHA-1: 0b b7 87 33 8e 59 21 fe 17 20 e4 10 8b 17 0c af 4d fb ef dc SHA-256: B1 4C F5 50 D8 F5 73 D9 3E 90 96 3C 32 A8 5F B5 1C 98 3C 98 16 4F 54 D7 89 15 F6 35 8C 95 4F 0E	July 16, 2029	CRT CRL
Entrust Class 3 Client CA - SHA256	RSA 2048, SHA-256	SHA-1: ‎fb 73 ee b6 f4 1f f3 2e b5 dc eb 6c c1 a6 f0 46 a6 06 b5 4d SHA-256: 33:85:73:38:36:1E:CF:C4:85:8D:DF:F6:B9:EF:62:73:E3:DB:85:6A:B9:CE:A1:C0:E2:C6:59:25:D1:C8:79:78	June 25, 2029	CRT CRL
Entrust Certification Authority - L1E	RSA 2048, SHA-256	SHA-1: ‎62:37:8c:89:2f:dd:53:75:7c:91:84:cf:4e:11:be:ec:da:25:16:03 SHA-256: 23:2F:63:67:CF:56:1E:00:C8:3E:18:0A:9F:CA:85:46:B3:77:1F:B4:50:EB:CB:4A:05:26:F8:34:9C:8C:A1:39	November 19, 2026	CRT CRL
Entrust Certification Authority - L1F	ECC P-384, SHA-384	SHA-1: ‎ 63 12 cf 0d a9 10 2f 52 63 d3 84 0f 07 4a 76 ab f0 30 1e be SHA-256: 18:35:B0:E4:82:EA:65:53:6F:C0:10:E4:BC:13:C0:60:F6:56:68:16:5F:BA:97:E2:F5:42:CE:96:CA:6D:FE:FC	October 5, 2037	CRT CRL
Entrust Certification Authority - L1J	ECC P-384, SHA-384	SHA-1: ‎ 33 ff fe 4a 9a 16 91 e5 3e fa 15 68 eb 74 3a 69 d8 b5 2e ad SHA-256: 34:47:B7:4B:5E:50:0A:54:99:83:FA:2C:ED:73:A5:64:2E:6A:AE:C7:88:29:54:61:58:43:7D:F6:6D:74:35:B8	October 5, 2037	CRT CRL
Entrust Certification Authority - L1K	RSA 2048, SHA-256	SHA-1: ‎f2 1c 12 f4 6c db 6b 2e 16 f0 9f 94 19 cd ff 32 84 37 b2 d7 SHA-256: 13:EF:B3:9A:2F:66:54:E8:C6:7B:D0:4F:4C:6D:4C:90:CD:6C:AB:50:91:BC:ED:C7:37:87:F6:B7:7D:3D:3F:E7	December 5, 2030	CRT CRL
Entrust Certification Authority - L1M	RSA 2048, SHA-256	SHA-1: ‎ cc 13 66 95 63 90 65 fa b4 70 74 d2 8c 55 31 4c 66 07 7e 90 SHA-256: 75:C5:B3:F0:1F:D1:F5:1A:2C:44:7A:B7:C7:85:D7:2E:69:FA:9C:47:2C:08:57:1E:7E:AD:F3:B8:EA:BA:E7:0C	October 15, 2030	CRT CRL
Entrust Certification Authority - L1N	RSA 2048, SHA-256	SHA-1: ‎c6 08 03 66 08 32 fe 58 fc a6 24 04 7f fd 28 a7 6a 46 52 35 SHA-256: B1:4D:50:89:07:9C:1D:8F:76:49:DB:9A:5D:3C:EF:B1:AA:C0:6F:66:AF:C4:92:25:C5:BE:2A:A1:9F:D4:1A:35	December 22, 2030	CRT CRL
Entrust Extended Validation Code Signing CA - EVCS2	RSA 4096, SHA-256	SHA-1: ‎B52063CECFFAFA24B57993B8EFE7FB1E4D6D56B SHA-256: 6510DC50A0D17DC438C2A85D738F558582B6C25361884F3882E207A51F4ED152	November 10, 2030	CRT CRL
Entrust Code Signing CA - OVCS2	RSA 2048, SHA-256	SHA-1: ‎ A61DC5D90A06003EB4DD3599B7A052FC3F70D7CC SHA-256: 95F843046BAC035572A3BA1B821DF8B759467F5B512DDFA8A72F0799447D6368	November 10, 2030	CRT CRL
Entrust Timestamping CA - TS1	RSA 2048, SHA-256	SHA-1: ‎58 c7 1a 4a e6 3e 76 8c a5 10 c5 4e b7 a0 6e 30 ef 8e 42 e9 SHA-256: 44:DF:CD:2C:57:31:10:E7:4B:F4:E8:59:03:59:5F:66:06:50:ED:92:5B:73:06:54:2C:54:E8:73:96:67:1F:03	June 22, 2029	CRT CRL
Entrust Timestamping CA - TS2	RSA 4096, SHA-512	SHA-1: 78491BAB39CF2D94D23D219C0D1EB279B16C61D SHA-256: 21E81685B352955B9ED48FB969BD2E4F95CFB85ED1260CF6B7FA70A035D0028F	December 29, 2040	CRT CRL
Entrust Certification Authority - QTSP1	RSA 2048, SHA-256	SHA-1: 4C71C14151D1B07BFBFE6965BE66A700837FB70D SHA-256: 681EBC1822B079B97E0404E4687D9B6C0C0892C820F55738A282AAE62529BDD8	November 26, 2030	CRT CRL
Entrust Certification Authority - ES QWAC2	RSA 2048, SHA-256	SHA-1: 85e3ea4172fa5e35617f9416a054385e8a6d3094 SHA-256: C97F2F6E6A8ADB6ECFE4978F08CA8F6F0123A94784522B610ADF6AB51439FC62	November 30, 2030	CRT CRL
Entrust Certification Authority - AATL1	RSA 4096, SHA-512	SHA-1: 2252A9A8ADFA83FFB540B77F0ADBAEBE566735EA SHA-256: 839F9B91C2E49218A66416DF181B984E9BE634D12A95483D98A6199FC0788D74	December 20, 2037	CRT CRL
Entrust Certification Authority - ES QSeal1	RSA 4096, SHA-512	SHA-1: 5BE0899FF2914CB3153BD57132BD31F4BCBA31BB SHA-256: 1701DE38124C4458F32B88AE7E62AC15876C427A3AD3BBAE8FD1479FF00030F3	December 19, 2037	CRT CRL
Entrust Certification Authority - ES QSig1	RSA 4096, SHA-512	SHA-1: 3B90EBF7918034B2A7E96A377A855BDD603EEB7C SHA-256: B2874B588A94034798319D5D329DB265F83A47F315BA5831A4970CB57166D594	December 19, 2037	CRT CRL
Entrust Certification Authority - ES QSeal2	RSA 4096, SHA-512	SHA-1: 3e50bd2368795d9b54d134d0e295fabf28fbcc7a SHA-256: 8C31D9375128D4B107F07678EEBFFF2CCA26A4CABB462F257F31A36FE7BCE104	December 28, 2040	CRT CRL
Entrust Certification Authority - ES QSig2	RSA 4096, SHA-512	SHA-1: 9ee1c8b9fcd17211cf15c0a71b0d09c9980c1abe SHA-256: 4671FDEAD3C5B32D834B36591D41496FCB8A0DB7D4F9F4CB9D34EABE0947EE87	December 28, 2040	CRT CRL
Entrust Verified Mark CA - VMC2	RSA 4096, SHA-512	SHA-1: 304DB1D13061F97C616752D04AE7F3AC147D60ED SHA-256: C269504B491DBF451A695B953711ADC5CD70975B5FCA1E181EBBD2172CB07E0C	December 30, 2040	CRT CRL

Public Trust Subordinate CAs

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Certification Authority - L1H	RSA 2048, SHA-256	SHA-1: 123fb67b9f148cd048e29ec6302fa6ed0629e08a	December 6, 2030	CRT CRL
Entrust Certification Authority - L1R	RSA 2048, SHA-256	SHA-1: 477df10752e5acdb45936824e4be360251ddb0fc	November 18, 2024	CRT CRL
Entrust Private Trust SSL CA - PrivSSL1	RSA 2048, SHA-256	SHA-1: 00a509ccf1ff20c47a13ac5e29d170bc75f45357	December 17, 2030	CRT CRL

PLEASE NOTE: In some cases, a Subordinate CA has been issued more than one certificate. This posting lists the last Subordinate CA certificate issued.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll-free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or Click Here for global Numbers)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as a UITF toll-free call.

Certificate Services Support

Helpful Resources