Entrust Certificate Services Subordinate CAs

- Industries
- Solutions
  - Our Expertise
  - Strong Identities
  - Secure Payments
  - Protected Data
- Featured Products
  - As a Service Products
- Enterprise ID & Issuance
  - Instant ID as a Service
    Learn More
  - Instant Issuance
- Financial ID & Issuance
  - Digital Card Solution
    Learn More
  - Digital Banking
    1. Digital Account Opening
    2. Digital Card Solution
  - Instant Issuance
  - Central Issuance
- Government ID & Issuance
  - Digital Citizen
    1. Seamless Travel as a Service
    2. ePassport as a Service
  - Instant Issuance
    1. Other citizen IDs and licenses.
    2. System Software
    3. Supplies
    4. Services
  - Central Issuance
    1. Passports, national IDs and driver licenses.
    2. Passport Issuance Systems
    3. National ID and Driver License Systems
    4. Inline Delivery & Insertion
    5. Standalone Delivery & Insertion
    6. System Software
    7. Supplies
    8. Services
  - Identity Verification as a Service
    Our IDVaaS solution allows remote verification of an individual’s claimed identity for immigration, border management, or digital services delivery.
    Learn More
- Cloud Security Posture Management
  - CloudControl 30-Day Free Trial
    Entrust CloudControl offers comprehensive security and automated compliance across virtualization, public cloud, and container platforms while increasing visibility and decreasing risks that can lead to unintended downtime or security exposure.
    Start Free Trial
- Key Management and Encryption
  - KeyControl for VM Encryption
  - KeyControl 30-Day Free Trial
    VMware vSphere and vSAN encryption require an external key manager, and KeyControl is VMware Ready certified and recommended. KeyControl enables enterprises to easily manage all their encryption keys at scale, including how often keys are rotated, and how they are shared securely.
    Start Free Trial
- Hardware Security Modules (HSM)
  - 1. nShield as a Service
  - nShield HSMs
  - Why you need an HSM
    Learn about all the details related to what hardware security modules offer you in security and cost savings...
    Learn More
- Digital Certificates
  - 1. Buy Certificates
    2. Renew Certificates
  - TLS/SSL Certificates
  - Qualified Certificates
    1. QWAC eIDAS Certificates
    2. QWAC PSD2 Certificates
  - Sales and Services
- Identity and Access Management (IAM)
  - Products
    1. Identity as a Service
      Cloud-Based IAM
    2. Identity Enterprise
      On-prem IAM
    3. Identity Essentials
      On-prem MFA solution for Windows users
    4. APIs and SDKs
  - Get Entrust Identity as a Service Free for 60 Days
    Explore the Identity as a Service platform that gives you access to best-in-class MFA, SSO, adaptive risk-based authentication, and a multitude of advanced features that not only keep users secure, but also contribute to an optimal experience.
    Start Free Trial
- Electronic and Digital Signing
  - Digital Signing as a Service
  - Digital Signing Certificates
  - Digital Signing Infrastructure
  - EU Qualified Trust Services
    In addition to our long-standing Adobe Approved Trust List (AATL) membership, we are a European Qualified Trust Service Provider for the issuance of eIDAS qualified certificates for qualified signatures and advanced seals, for PSD2 certificates and for QWACs
    Learn More
- Public Key Infrastructure (PKI)
  - PKI Products
  - Managed Services
  - Cryptographic Center of Excellence
  - Try Post-Quantum PKI as a Service Now
    Get PQ Ready. PKIaaS PQ provides customers with composite and pure quantum Certificate Authority hierarchies.
    Try Now
- Resources
  - Issuance Systems Knowledge Base
    Learn More
  - Digital Security Knowledge Base
    Learn More
  - Cybersecurity Institute
    Get critical insights and education on security concepts from our Trust Matters newsletter, explainer videos, and the Cybersecurity Institute Podcast.
    Learn More
- Partners
  - Partner with Entrust
    Join one or more of our partner programs and we’ll help you increase profitability, expand your brand, and target strategic customers.
    Learn More
  - Partner Directory
    Search for partners based on location, offerings, channel or technology.
    Search for a Partner
  - Programs
  - Partner Logins
- Buy
  - Shop Certificate Services
    Shop for new single certificate purchases.
    Learn More
  - Certificate Services Customer Portal
    Existing Entrust Certificate Services customers can login to issue and manage certificates or buy additional services.
    Learn More
  - Certificate Services Partner Portal
    Existing partners can provision new customers and manage inventory.
    Learn More
  - Instant Financial Card Issuance Supplies
    1. Registered Customer Login
    2. Request Access
- About Entrust
  - Securing a World in Motion Since 1969
    We’ve established secure connections across the planet and even into outer space. We’ve enabled reliable debit and credit card purchases with our card printing and issuance technologies. Protected international travel with our border control solutions. Created secure experiences on the internet with our SSL technologies. And safeguarded networks and devices with our suite of authentication products.
    Explore Our History
  - Cybersecurity Institute
    Get critical insights and education on security concepts from our Trust Matters newsletter, explainer videos, and the Cybersecurity Institute Podcast.
    Learn More
- Search Entrust
  - Search:

Entrust Subordinate Certificates

Public Trust Subordinate CAs

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Enterprise Intermediate CA-ICA1	RSA 2048, SHA-256	SHA-1: CF9124E4B855E5CF0C75EC77C8801331DA162A8 SHA-256: C54D8B12C438725C2755B4AD81825F6975CBDA6C258A2BFBB8247A14F03BD22A	July 7, 2029	CRT CRL
Entrust Class 1 Client CA - SHA256	RSA 2048, SHA-256	SHA-1: 67:c9:31:42:6a:df:1a:08:a7:2a:5d:d0:15:18:82:98:9b:a0:3d:2e SHA-256: C6:E9:E9:93:C2:58:B7:21:24:AA:D3:C9:C0:68:B6:EF:23:57:61:55:F3:10:B3:05:73:33:61:E2:0B:17:C9:43	November 16, 2030	CRT CRL
Entrust Class 2 Client CA	RSA 2048, SHA-256	SHA-1: ‎13:13:ed:8d:ee:e9:49:d9:14:5f:7e:eb:f1:3d:c2:41:be:30:8a:b5 SHA-256: 1A:20:FE:F4:64:82:A9:8B:AC:6F:6C:73:97:C0:17:31:0A:C7:FB:78:49:54:38:BC:7A:7D:E9:03:5C:24:66:79	June 29, 2029	CRT CRL
Entrust Class 2 Client CA - C2CA2	RSA 2048, SHA-256	SHA-1: 0b b7 87 33 8e 59 21 fe 17 20 e4 10 8b 17 0c af 4d fb ef dc SHA-256: B1 4C F5 50 D8 F5 73 D9 3E 90 96 3C 32 A8 5F B5 1C 98 3C 98 16 4F 54 D7 89 15 F6 35 8C 95 4F 0E	July 16, 2029	CRT CRL
Entrust Personal Email Certification Authority - SMIME1	RSA 4096, SHA-384	SHA-1: 70 49 5e a1 51 dd f0 25 4a 1e 7d 4d 69 9d b4 f1 e8 8f d8 ab SHA-256:E2:29:CD:78:B3:8B:D7:B7:4A:C4:31:FA:57:E2:94:CB:AA:35:EB:23:82:93:DE:DE:04:B2:0B:21:8D:92:BA	December 29, 2040	CRT CRL
Entrust Class 3 Client CA - SHA256	RSA 2048, SHA-256	SHA-1: ‎fb 73 ee b6 f4 1f f3 2e b5 dc eb 6c c1 a6 f0 46 a6 06 b5 4d SHA-256: 33:85:73:38:36:1E:CF:C4:85:8D:DF:F6:B9:EF:62:73:E3:DB:85:6A:B9:CE:A1:C0:E2:C6:59:25:D1:C8:79:78	June 25, 2029	CRT CRL
Entrust Digital Signing Certification Authority - DS1	RSA 4096, SHA-384	SHA-1: cbfdb6613a775b0598ae03d964c834cf91ec86bd SHA-256: EEE2B2C76CF4A1DC6E90C14CC1986D120245294833BD6A739EFBD3EBDE9BB972	December 29, 2040	CRT CRL
Entrust Certification Authority - L1E	RSA 2048, SHA-256	SHA-1: ‎62:37:8c:89:2f:dd:53:75:7c:91:84:cf:4e:11:be:ec:da:25:16:03 SHA-256: 23:2F:63:67:CF:56:1E:00:C8:3E:18:0A:9F:CA:85:46:B3:77:1F:B4:50:EB:CB:4A:05:26:F8:34:9C:8C:A1:39	November 19, 2026	CRT CRL
Entrust Certification Authority - L1F	ECC P-384, SHA-384	SHA-1: ‎ 63 12 cf 0d a9 10 2f 52 63 d3 84 0f 07 4a 76 ab f0 30 1e be SHA-256: 18:35:B0:E4:82:EA:65:53:6F:C0:10:E4:BC:13:C0:60:F6:56:68:16:5F:BA:97:E2:F5:42:CE:96:CA:6D:FE:FC	October 5, 2037	CRT CRL
Entrust Certification Authority - L1J	ECC P-384, SHA-384	SHA-1: ‎ 33 ff fe 4a 9a 16 91 e5 3e fa 15 68 eb 74 3a 69 d8 b5 2e ad SHA-256: 34:47:B7:4B:5E:50:0A:54:99:83:FA:2C:ED:73:A5:64:2E:6A:AE:C7:88:29:54:61:58:43:7D:F6:6D:74:35:B8	October 5, 2037	CRT CRL
Entrust Certification Authority - L1K	RSA 2048, SHA-256	SHA-1: ‎f2 1c 12 f4 6c db 6b 2e 16 f0 9f 94 19 cd ff 32 84 37 b2 d7 SHA-256: 13:EF:B3:9A:2F:66:54:E8:C6:7B:D0:4F:4C:6D:4C:90:CD:6C:AB:50:91:BC:ED:C7:37:87:F6:B7:7D:3D:3F:E7	December 5, 2030	CRT CRL
Entrust Certification Authority - L1M	RSA 2048, SHA-256	SHA-1: ‎ cc 13 66 95 63 90 65 fa b4 70 74 d2 8c 55 31 4c 66 07 7e 90 SHA-256: 75:C5:B3:F0:1F:D1:F5:1A:2C:44:7A:B7:C7:85:D7:2E:69:FA:9C:47:2C:08:57:1E:7E:AD:F3:B8:EA:BA:E7:0C	October 15, 2030	CRT CRL
Entrust Certification Authority - L1N	RSA 2048, SHA-256	SHA-1: ‎c6 08 03 66 08 32 fe 58 fc a6 24 04 7f fd 28 a7 6a 46 52 35 SHA-256: B1:4D:50:89:07:9C:1D:8F:76:49:DB:9A:5D:3C:EF:B1:AA:C0:6F:66:AF:C4:92:25:C5:BE:2A:A1:9F:D4:1A:35	December 22, 2030	CRT CRL
Entrust 4K TLS Certification Authority - EVTLS1	RSA 4096, SHA-384	SHA-1: ‎ 2b0026d48bbfaca6160608b365af3d101c96db75 SHA-256: AAC8B9394C3BB0376622444235343371C59E951FF85A151B3FE19C288076E2B5	December 29, 2040	CRT CRL
Entrust P384 TLS Certification Authority - EVTLS2	ECC P-384, SHA-384	SHA-1: ‎ 7f9bfdb945b9d8130c8e5dbaf85c7758e1d168a1 SHA-256: 2426C77CFA12EBCDB6B013225496C0E7AAD66D63597AE5EF9A0BEB3830C23EC2	December 29, 2040	CRT CRL
Entrust 4K TLS Certification Authority - OVTLS1	RSA 4096, SHA-384	SHA-1: ‎3ebec1b90d9cff79d4e51daae46a5289bf74c164 SHA-256: 9EC6CA44D6ADB5DAEFEFC9D773787E3BB8E1243F5455341B8438A6776869333B	December 29, 2040	CRT CRL
Entrust P384 TLS Certification Authority - OVTLS2	ECC P-384, SHA-384	SHA-1: ‎99b30faa1f0f7a8cbc4bb726158fa0227ad168c0 SHA-256: 2DB842F824321277291266B230ABC31DE13C1D4B852D6C21C9B1007D5AC20681	December 29, 2040	CRT CRL
Entrust Extended Validation Code Signing CA - EVCS2	RSA 4096, SHA-256	SHA-1: ‎B52063CECFFAFA24B57993B8EFE7FB1E4D6D56B SHA-256: 6510DC50A0D17DC438C2A85D738F558582B6C25361884F3882E207A51F4ED152	November 10, 2030	CRT CRL
Entrust Code Signing CA - OVCS2	RSA 2048, SHA-256	SHA-1: ‎ A61DC5D90A06003EB4DD3599B7A052FC3F70D7CC SHA-256: 95F843046BAC035572A3BA1B821DF8B759467F5B512DDFA8A72F0799447D6368	November 10, 2030	CRT CRL
Entrust Timestamping CA - TS1	RSA 2048, SHA-256	SHA-1: ‎58 c7 1a 4a e6 3e 76 8c a5 10 c5 4e b7 a0 6e 30 ef 8e 42 e9 SHA-256: 44:DF:CD:2C:57:31:10:E7:4B:F4:E8:59:03:59:5F:66:06:50:ED:92:5B:73:06:54:2C:54:E8:73:96:67:1F:03	June 22, 2029	CRT CRL
Entrust Timestamping CA - TS2	RSA 4096, SHA-512	SHA-1: 78491BAB39CF2D94D23D219C0D1EB279B16C61D SHA-256: 21E81685B352955B9ED48FB969BD2E4F95CFB85ED1260CF6B7FA70A035D0028F	December 29, 2040	CRT CRL
Entrust Certification Authority - ES QWAC2	RSA 2048, SHA-256	SHA-1: 85e3ea4172fa5e35617f9416a054385e8a6d3094 SHA-256: C97F2F6E6A8ADB6ECFE4978F08CA8F6F0123A94784522B610ADF6AB51439FC62	November 30, 2030	CRT CRL
Entrust Certification Authority - ES QSeal2	RSA 4096, SHA-512	SHA-1: 3e50bd2368795d9b54d134d0e295fabf28fbcc7a SHA-256: 8C31D9375128D4B107F07678EEBFFF2CCA26A4CABB462F257F31A36FE7BCE104	December 28, 2040	CRT CRL
Entrust Certification Authority - ES QTS1	RSA 4096, SHA-256	SHA-1: 8820FD7CDF5CAD3077A3704253CB3D10A1E43B52 SHA-256: 253F463FB19E06D188A1F81AB6A3CA78C9352B08DC94DD74CF05336809363812	December 28, 2040	CRT CRL
Entrust Certification Authority - ES QSig2	RSA 4096, SHA-512	SHA-1: 9ee1c8b9fcd17211cf15c0a71b0d09c9980c1abe SHA-256: 4671FDEAD3C5B32D834B36591D41496FCB8A0DB7D4F9F4CB9D34EABE0947EE87	December 28, 2040	CRT CRL
Entrust Verified Mark CA - VMC2	RSA 4096, SHA-512	SHA-1: 304DB1D13061F97C616752D04AE7F3AC147D60ED SHA-256: C269504B491DBF451A695B953711ADC5CD70975B5FCA1E181EBBD2172CB07E0C	December 30, 2040	CRT CRL

Time-stamp Authorities

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Timestamp Authority - TSA1	RSA 4096, SHA-256	SHA-1: 63064AAB6177F9AA44BDFB6FDFA6AC1A9AACDEC0 SHA-2: EE6119ABBA9DC5BB8C2C81BEF9BEEE8E0E25FDD85EB3F1A635352681D9B68BAF	December 31, 2028	CRT
Entrust Timestamp Authority - TSA2	RSA 4096, SHA-512	SHA-1: 291D1BF682D27FD5E49083C7F9772BB4BBFAB34C SHA-2: 7AD12B0C615549B7CC21BA714EA79F412F1B35B927D365AFE98F2027715C0B63	November 31, 2028	CRT
Entrust Qualified Time Stamping Authority - QTSA1	RSA 4096, SHA-256	SHA-1: 550c6b08aeb9211b30cf33d3470c1f0c49aea753 SHA-2: A0:51:82:93:8C:35:6E:2F:A2:A4:DA:2A:4C:F2:8A:28:D8:F3:5A:51:F3:65:E4:68:00:ED:E8:46:10:38:8F:13	October 2, 2025	CRT

Private Trust Root and Subordinate CAs

Private Trust Roots

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Root Certification Authority - G3	RSA 2048, SHA-1	SHA-1: ae8569d94f4ab1c464ad9b7cfd7840b0e39daf66	December 18, 2030	Valid CRT CRL
Entrust 4K Private TLS Root CA - 2022	RSA 4096, SHA-384	SHA-1: b8bd2bb0af6e55f61478dc852961c07f200036e4	December 7, 2047	Valid CRT CRL

Private Trust Subordinate CAs

Common Name	Public Key	Fingerprint	Valid Until	Links
Entrust Certification Authority - L1H	RSA 2048, SHA-256	SHA-1: 123fb67b9f148cd048e29ec6302fa6ed0629e08a	December 6, 2030	CRT CRL
Entrust Certification Authority - L1R	RSA 2048, SHA-256	SHA-1: 477df10752e5acdb45936824e4be360251ddb0fc	November 18, 2024	CRT CRL
Entrust Private Trust SSL CA - PrivSSL1	RSA 2048, SHA-256	SHA-1: 00a509ccf1ff20c47a13ac5e29d170bc75f45357	December 17, 2030	CRT CRL

PLEASE NOTE: In some cases, a Subordinate CA has been issued more than one certificate. This posting lists the last Subordinate CA certificate issued.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll-free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or Click Here for global Numbers)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as a UITF toll-free call.