Ernst & Young
Réviseurs d’Entreprises
Bedrijfsrevisoren
De Kleetlaan 2
B – 1831 Diegem

Tel: +32 (0)2 774 91 11
Fax: +32 (0)2 774 90 90
ey.comINDEPENDENT ASSURANCE REPORTTo the management of GlobalSign NV/SA (“GlobalSign”):
Scope
We have been engaged, in a reasonable assurance engagement, to report on GlobalSign
management’s assertion that, except for matters described in the assertion, for its Certification
Authority (CA) operations at its locations as detailed in Appendix C, throughout the period April 1,
2021 to March 31, 2022 for its CAs as enumerated in Appendix B, GlobalSign has:
► disclosed its SSL certificate lifecycle management business practices in the applicable versionsof the Certificate Practice Statements and Certificate Policies, as stipulated in Appendix A,
including its commitment to provide SSL certificates in conformity with the CA/Browser Forum
Guidelines on the GlobalSign’s website, and provided such services in accordance with its
disclosed practices► maintained effective controls to provide reasonable assurance that:•

The integrity of keys and SSL certificates it manages is established and protected
throughout their lifecycles; and•SSL subscriber information is properly authenticated (for the registration activities
performed by GlobalSign)► maintained effective controls to provide reasonable assurance that:•

Logical and physical access to CA systems and data is restricted to authorizedindividuals; and•The continuity of key and certificate management operations is maintained; and•CA systems development, maintenance, and operations are properly authorized
and performed to maintain CA systems integrity

and, for its CAs in scope for Network Security Requirements as enumerated in Appendix B:► maintained effective controls to provide reasonable assurance that it meets the Network andCertificate System Security Requirements as set forth by the CA/Browser Forumin accordance with the WebTrust Principles and Criteria for Certification Authorities - SSL Baseline
with Network Security, Version 2.6.
Certification authority’s responsibilities
GlobalSign’s management is responsible for its assertion, including the fairness of its presentation,and the provision of its described services in accordance with the WebTrust Principles and Criteria
for Certification Authorities - SSL Baseline with Network Security, Version 2.6.

Société coopérative à responsabilité limitée
Coöperatieve vennootschap met beperkte aansprakelijkheid
RPM Bruxelles – RPR Brussel – T.V.A. – B.T.W. BE 0446.334.711 – IBAN N° BE71 2100 9059 0069
* agissant au nom d’une société/handelend in naam van een vennootschap
A member firm of Ernst & Young Global LimitedOur independence and quality control
We have complied with the independence and other ethical requirements of the Code of Ethics forProfessional Accountants issued by the International Ethics Standards Board for Accountants, which
is founded on fundamental principles of integrity, objectivity, professional competence and due
care, confidentiality and professional behaviour.
The firm applies International Standard on Quality Control 1, Quality Control for Firms that Perform
Audits and Reviews of Historical Financial Information, and Other Assurance and Related Services,
Engagements and accordingly maintains a comprehensive system of quality control including
documented policies and procedures regarding compliance with ethical requirements, professional
standards and applicable legal and regulatory requirements.
Practitioner’s responsibilities
Our responsibility is to express an opinion on management’s assertion based on our procedures. We
conducted our procedures in accordance with International Standard on Assurance Engagements
3000, Assurance Engagements Other than Audits or Reviews of Historical Financial Information,issued by the International Auditing and Assurance Standards Board. This standard requires that weplan and perform our procedures to obtain reasonable assurance about whether, in all material
respects, management’s assertion is fairly stated, and, accordingly, included:
1. Obtaining an understanding of GlobalSign’s SSL certificate lifecycle management businesspractices, including its relevant controls over the issuance, renewal, and revocation of SSL
certificates, and obtaining an understanding of GlobalSign’s network and certificate systemsecurity to meet the requirements set forth by the CA/Browser Forum;
2. Selectively testing transactions executed in accordance with disclosed SSL certificate
lifecycle management practices
3. Testing and evaluating the operating effectiveness of the controls; and4. Performing such other procedures as we considered necessary in the circumstances.
We believe that the evidence we have obtained is sufficient and appropriate to provide a basis forour opinion.
GlobalSign’s management has disclosed to us the attached comments (Appendix D) that have beenposted publicly in the online forums of the Bugzilla site, as well as the online forums of individualinternet browsers that comprise the CA/Browser Forum. We have considered the nature of thesecomments in determining the nature, timing and extent of our procedures.
The relative effectiveness and significance of specific controls at GlobalSign and their effect on
assessments of control risk for subscribers and relying parties are dependent on their interaction
with the controls, and other factors present at individual subscriber and relying party locations. We
have performed no procedures to evaluate the effectiveness of controls at individual subscriber andrelying party locations.

A member firm of Ernst & Young Global Limited

Inherent limitations
There are inherent limitations in the effectiveness of any system of internal control, including thepossibility of human error and the circumvention of controls. For example, because of their nature,controls may not prevent, or detect unauthorised access to systems and information, or failure tocomply with internal and external policies or requirements. Also, the projection to the future of any
conclusions based on our findings is subject to the risk that controls may become ineffective.
Basis for qualified opinion
During our procedures, we noted the following that caused a qualification of our opinion:
1

Observation
We noted that GlobalSign has issued
multiple certificates for which the subject
information was not in accordance with the
SSL Baseline Requirements i.e., certificatescontained incorrect localityName,
stateOrProvinceName or countryName as
disclosed in the Bugzilla incidents 1707073
and 1708834 (see Appendix D). A part ofthese certificates was misissued because of
the logic failure in the automation scripts
used by GlobalSign and a part of thecertificates was misissued because theinformation provided by the Applicant was
not sufficiently verified as per the steps
established by the SSL Baseline
Requirements.
This caused WebTrust Principles and Criteria
for Certification Authorities – SSL Baseline
with Network Security v2.6, Principle 2,
Criteria 2.15 and 4.2 to not be met.

Relevant WebTrust criteria
Principle 2, Criterion 2.15: The CA
maintains controls to provide reasonableassurance that Subject information of
Certificates conforms to the Baseline
Requirements, including:(...)• subject:localityName• subject:stateOrProvinceName• subject:postalCode• subject:countryName(...)
Principle 2, Criterion 4.2: The CA
maintains controls to provide reasonableassurance that the following information
provided by the Applicant is verified
directly by performing the steps
established by the SSL Baseline
Requirements:• Identity (SSL Baseline Requirements
Section 3.2.2.1)• DBA/Trade name (SSL Baseline
Requirements Section 3.2.2.2)• Authenticity of Certificate Request (SSL
Baseline Requirements Section 3.2.5)• Verification of Individual Applicant (SSL
Baseline Requirements Section 3.2.3)• Verification of Country (SSL Baseline
Requirements Section 3.2.2.3)

Qualified Opinion
In our opinion, except for the matters described in the basis for qualified opinion section above,
throughout the period April 1, 2021 to March 31, 2022, GlobalSign has, in all material respects:► disclosed its SSL certificate lifecycle management business practices in the applicable versionsof the Certificate Practice Statements and Certificate Policies, as stipulated in Appendix A,
including its commitment to provide SSL certificates in conformity with the CA/Browser Forum
Guidelines on the GlobalSign’s website, and provided such services in accordance with its
disclosed practices

A member firm of Ernst & Young Global Limited► maintained effective controls to provide reasonable assurance that:•

The integrity of keys and SSL certificates it manages is established and protected
throughout their lifecycles; and•SSL subscriber information is properly authenticated (for the registration activities
performed by GlobalSign)► maintained effective controls to provide reasonable assurance that:•

Logical and physical access to CA systems and data is restricted to authorizedindividuals; and•The continuity of key and certificate management operations is maintained; and•CA systems development, maintenance, and operations are properly authorized
and performed to maintain CA systems integrity► maintained effective controls to provide reasonable assurance that it meets the Network andCertificate System Security Requirements as set forth by the CA/Browser Forumin accordance with the WebTrust Principles and Criteria for Certification Authorities - SSL Baseline
with Network Security, Version 2.6.
This report does not include any representation as to the quality of GlobalSign’s services beyond
those covered by the WebTrust Principles and Criteria for Certification Authorities - SSL Baseline
with Network Security, Version 2.6, nor the suitability of any of GlobalSign’s services for any
customer's intended purpose.

EY Bedrijfsrevisoren BV
Diegem, Belgium

ChristelWeymeersch(Signature)

Digitally signed by Christel
Weymeersch (Signature)
DN: cn=Christel Weymeersch(Signature), c=BE
Date: 2022.06.29 14:51:26+02'00'Christel Weymeersch, Partner*
June 29, 2022
* Acting on behalf of a BV

A member firm of Ernst & Young Global Limited

Appendix A – Certification Practice Statements and Certificate Policies in Scope
Certification Practice Statement

Begin Effective Date

End Effective Date

Version 9.7

March 30, 2021

September 30, 2021

Version 9.8

September 30, 2021

November 30, 2021

Version 9.9

November 30, 2021

March 15, 2022

Version 9.10

March 15, 2022

Certificate Policy

Begin Effective Date

End Effective Date

Version 6.7

March 30, 2021

September 30, 2021

Version 6.8

September 30, 2021

November 30, 2021

Version 6.9

November 30, 2021

March 15, 2022

Version 6.10

March 15, 2022

A member firm of Ernst & Young Global Limited

Appendix B – In-Scope CAs
The following CAs were in scope for the SSL Baseline Requirements and Network Security Requirements:

Root CA
#
1

2
3
4
5

6
7
8
9

Subject
CN = GlobalSign Root CA,
OU = Root CA,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R3
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign ECC Root CA - R5
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R6
CN = GlobalSign Root R46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Root E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Secure Mail Root R45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Secure Mail Root E45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Code Signing Root
R45,

Fingerprint SHA-256
EBD41040E4BB3EC742C9E381D31EF2A41A48B6685C96E7CEF3C1DF6CD4331C99

CBB522D7B7F127AD6A0113865BDF1CD4102E7D0759AF635A7CF4720DC963C53B
179FBC148A3DD00FD24EA13458CC43BFA7F59C8182D783A513F6EBEC100C8924
2CABEAFE37D06CA22ABA7391C0033D25982952C453647349763A3AB5AD6CCF6
9
4FA3126D8D3A11D1C4855A4F807CBAD6CF919D3A5A88B03BEA2C6372D93C40C
9
CBB9C44D84B8043E1050EA31A69F514955D7BFD2E2C6B49301019AD61D9F505
8319AF0A7729E6F89269C131EA6A3A16FCD86389FDCAB3C47A4A675C161A3F97
4
5CBF6FB81FD417EA4128CD6F8172A3C9402094F74AB2ED3A06B4405D04F30B19
7B9D553E1C92CB6E8803E137F4F287D4363757F5D44B37D52F9FCA22FB97DF86

Additional information

10

11

12

13

14

15

16

O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Code Signing RootE45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Document Signing
Root R45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Document Signing
Root E45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Client Authentication
Root R45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Client Authentication
Root E45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping Root
E46,
O = GlobalSign nv-sa,
C = BE

26C6C5FD4928FD57A8A4C5724FDD279745869C60C338E262FFE901C31BD1DB2B

38BE6C7EEB4547D82B9287F243AF32A9DEEB5DC5C9A87A0056F938D91B456A5A
F86973BDD0514735E10C1190D0345BF89C77E1C4ADBD3F65963B803FD3C9E1FF

2BCBBFD66282C680491C8CD7735FDBBAB7A8079B127BEC60C535976834399AF
7
165C7E810BD37C1D57CE9849ACCD500E5CB01EEA37DC550DB07E598AAD2474A
8

8B0F0FAA2C00FE0532A8A54E7BC5FD139C1922C4F10F0B16E10FB8BE1A634964

4774674B94B78F5CCBEF89FDDEBDABBD894A71B55576B8CC5E6876BA3EAB453
8

DV TLS Issuing CA#
17

Subject
CN = GlobalSign Atlas R3 AlphaSSL CA
2022 Q2,

Fingerprint SHA-256
45F1854530EC037AAACB4B2DE9B4D0FDBFC61888ABD4EE0414183D99E60437A
C

Additional information

18

19

20

21

22

23

24

25

26

O = Globalsign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV TLS
CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV
ACME CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV ACME CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 AlphaSSL CA
2022 Q1,
O = Globalsign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV ACME CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = Alibaba Cloud GCC R3 DV TLS CA
2021,
O = Alibaba Cloud Computing Co., Ltd.,C = CN
CN = Alibaba Cloud GCC R3 AlphaSSL
CA 2021,O = Alibaba Cloud Computing Co., Ltd.,C = CN
CN = GlobalSign Atlas ECCR5 DV TLS
CA 2022 Q1,

15B63CDD772A8D42DC5E48174C1F7E3D40FC82C478DF3A6443C7BD92FBC6D5D
E735CC386EC1A82E657A5B451C94959611D3C7D0CBB1FD9D9EDB42C7192F8463
A
7B063A9CD48767C475AA6BCED4667CDC56068F8B7B895125BC4EB24682EEB60
6
2DFE47E144ABB39F9FE451CECD352D9A9BD28982351E8B6524FEB101DBAB1FEC

A04FA69E84CCD44F5E526B558631E346B21417D4D1B606A08CADE3928DBF115
892651CD48A0288AA3075354DDC15DC24D0AF8EE67015B68A145970A093475E1
98F3E5D6858B927D284FDB85A1B15875CD78E63B820C20DDC539CCD84B0C1A6A
A
7AEDE5374ECA9FF34C5727C10DB982222D753157797449B88364F70EEFA0C24C

727A9069A3C60D213584E616D5BF55DFD19C71A3976645EA6A73B18F83760D2
4

27

28

29

30
31

32

33

34

35

O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV
ACME CA 2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = TK Elevator Atlas R6 DV CA
2021,
O = TK Elevator GmbH,C = DE
CN = AlphaSSL CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV ACME CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 AlphaSSL CA
H2 2021,
O = Globalsign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV TLS
CA H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV
ACME CA H2 2021,
O = GlobalSign nv-sa,
C = BE

D9E4A803FB498EEE9379FCF90AC3067AE65D098CC77890C37E575E249CD7D7C9A262F7D653E6C745EEABEBF6672A756B501A82F06708F2B5E77916217037BBCA

988D6B2D87BAF43821C4D304BE2B0E8F325DC17B7A220E934F5C5B7BADFF8E1C

EE793643199474ED60EFDC8CCDE4D37445921683593AA751BBF8EE491A391E97
1DD095449FFB3CFF14B2224D596B83FD42F2B47683553C797D11150C918691BD

B254F3CDEAF1D29AB53CB439E80FB996F1E90A283E9B5085B8749D18E4F5987B

11B6DB5B68DCDF34479AE7E7B7BBAA7165905577AD83D474F2BB9717CE244CE
A
6916DA916EE1B1E98CB31EE94730EECD7F2C077965BDB8D4E16A3B81C58A29B6

61B30CEAEA0C8C6397C3599829809CB73CA8F817BB9CDF000D7453E44243802
8

36

37
38

39

40

41

42

43
44

45

CN = CUISEC GCC R3 TLS DV CA
2021,
O = 联通智慧安全科技有限公司,
C = CN
CN = VTB BANK GCC R6 DV CA 2021,
O = VTB BANK (PJSC),
C = RU
CN = GlobalSign Atlas R3 AlphaSSL CA
H1 2021,
O = Globalsign nv-sa,
C = BE
CN = GlobalSign Domain Validation CA- SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV ACME CA
H1 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV
ACME CA H1 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = AlphaSSL CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Domain Validation CA- SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = Valid Certificadora Digital SSL DV
CA 2018,

692FE1B8BA2699531DE4CD2F52AE38FA119AB01F4B31AB78FE6DB3FDF03A7031

95BA96F72CB314ECD05CE0FD75D886381A368C8F5869F04BDD3024893F4E393B
1ABC5AD5BC3911A5B4A91E42BBA3212E2AA3DC80147EFE1D49572E4BE053263
3

BFDF4CF3F143AD0DB912D8AB3A7C12F617B9EA60CE8B1F4E44F74270FB21B19B

70F5C63C4F112837AB99870B0ECB5D722EEA0B0D0DDB9320B98B99B9BD13786
6
E7757BB0C4942ADC108D092A17B812B1043E06A094DD5E214920325556FC692
4
B65FE6A1BF2D52FF68B7D3E9D0F06B300A1C3F248309B70405CA7BDEC054BDDD

8C2410F76B149CA062B420AB611B6BF0A06E6E799A29587E4D4EC16D0537B7E
A
37D080A5E9A526663E56EE20DE4BD9F7952DACC341491439080167AD5DD18CA
C
FCF26FBC1B2A25A76AB4EA92B2CBEF367E0131091C802DA49898F78AE54B30F8

Revoked on April 06, 2022

46

47

48

49

50
51
52

53

54

O = VALID CERTIFICADORA DIGITAL,C = BR
CN = Valid Certificadora Digital
AlphaSSL CA 2018,
O = VALID CERTIFICADORA DIGITAL,C = BR
CN = Soluti CA - DV,
O = SOLUTI - SOLUCOES EM
NEGOCIOS INTELIGENTES S/A,
C = BR
CN = GlobalSign Domain Validation CA- SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R3 DV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = AlphaSSL CA - SHA256 - G2,
O = AlphaSSL
CN = AlphaSSL CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Domain Validation CA- SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV TLS
CA 2020-12,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
2020-12,O = GlobalSign nv-sa,
C = BE

04DE47A9CDD3091CFC5EF6AAA3B7D4B53E13C4D4DC02364F6C0B408742EC3C765C452334D9C9C9A2EA42CC77A7165E1795EE9D84EB70CB784B47EA9D92A582D
9
09BC1B137C031239EF788673E94EB17F5F3ECAB07D3ADBFB485E75ABFAAF3B9A

762538439509C411C437D3C567563E1378671281FC4A1464ADD031870843676
E
933E4A2D8DB1FF9FF0E508EA7F1637E074F660FE6F365A2233DFC2B52C889D98
5A817EADA4AD78734EBB2CF674352D97F4352290C40EAF10E764B1EAC075B0E
6
669E7727A92BE72D9718E16922DC1BC1492B1AF33FA4793E68D8778F19A2EBE0

6F335DD7CD4AAA1D9140F290E9E7B3498A7CC35A244AA300E146BA2D9D02B96
0
59F5FF92B608A0119FF1DD7C603E0EB16F4FEAD9D4717AC3BC62D286AE399CDA

55

56

CN = GlobalSign Atlas ECCR5 DV TLS
CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = Alibaba Cloud GCC R3 DV TLS CA
2021,
O = Aliyun Computing Co., Ltd.,C = CN

72132ECF2F8C75B5F214C00ED14562E14912B7F2F4D2633180F3E4918980FEC4

Revoked on November 17, 2021

0FBBBC699B65EA9B676F1042BE3F093224CB1F769F142579B8CA023AEDD6E706

Revoked on November 17, 2021

Fingerprint SHA-256
91F19CE503C9FE7FF9587D8EFBEF7315AAEE77DC2D14526126493B4AD6FE801F

Additional informationOV TLS Issuing CA
#
57

58

59

60

61

62

Subject
CN = Trusted Root TLS CA SHA256
G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OV TLS
CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OVACME CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV ACME CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OV TLS
CA 2022 Q1,
O = GlobalSign nv-sa,
C = BE

A816AFFF746EA0F0A0A064C0432F9D2B7D0CE79EC2D1E9940F4A186A25182284

AFDB3C396D85D19FBE58206DF0659EAE614C4AB18F5CCF20B783AAF0BBE96A03

CB2C685CB214DCD2F2CDA6E2C155AAF21A7E134BC0BCE808B1130C459125B0A
4
D50B20ADFF959BFBEE83B6FD1FAB36FDE7941B960CFC6839AAC63B9FFDB46413

F9D3214AD6F5D6D2B3C8161F96028B76812B058614A66786B92C8FEBDAC020EE

63

64

65

66

67

68

69

70
71
72

CN = GlobalSign Atlas R3 OV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OVACME CA 2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV ACME CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OV TLS
CA H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = Alibaba Cloud GCC R3 TLS OV CA
2021,
O = Alibaba Cloud Computing Co., Ltd.,C = CN
CN = CUISEC GCC R3 TLS OV CA
2021,
O = 联通智慧安全科技有限公司,
C = CN
CN = VTB BANK GCC R6 OV CA 2021,
O = VTB BANK (PJSC),
C = RU
CN = ATT Atlas R3 OV TLS CA 2020,
O = ATT Services Inc,
C = US
CN = CrowdStrike GCC R3 TLS OV CA
2020,

536A35A3FA630379CF3B4D4B4E1395AF9CFED2243138E634E4369A31E2872843

218C470B78B02D39B84FC6892F5A1FE9C99D6B9A6B8B7471E039EDCFCA91004C

EA532E6D78FF00FD4F56447F7E0A47D239D945424B77CF0D15A795CB4EE602BD

4E1A564C71A04288970E53C037D1CFC25C1F9BEFC5276CF3BD501EE262F04202

90AF1B61A082662A639CAA68C6A3FB41EBBA3760C351A4A1E89FB6DACAD486F
C
31A096A1CB918876EE57C85B2349FC9CC2C2CB4FCF9BDD37787CE9DA57AF4790

C7F145D474F5DC20B27A64E1696179522469078B333FE8FF887B97CE7805E362

312AB012744F859EEF8AE0FA25D0259E89DAAF51B94FAC67DFC61060F0DB2207
DC2728331312E75C4D7B442F3BDDA790CB77A9D6AC854D5BCE18AC43CA59909
A
78CB512DE48CEDCD7134DF57C973C1E1A07692B8F542A44ACEBB8BB776D55D5
9

Revoked on April 06, 2022

73

74

75

76

77

78

79

80

81

O = CrowdStrike Inc.,
C = US
CN = DPDHL Global TLS CA - I5,
O = Deutsche Post AG,
C = DE
CN = RNP ICPEdu OV SSL CA 2019,
O = Rede Nacional de Ensino e
Pesquisa - RNP,
C = BR
CN = SHECA OV Secure Server CA,
O = Shanghai Electronic Certificate
Authority Center Co., Ltd.,C = CN
CN = Valid Certificadora Digital SSL OV
CA 2018,
O = VALID CERTIFICADORA DIGITAL,C = BR
CN = Soluti CA - OV,
O = SOLUTI - SOLUCOES EM
NEGOCIOS INTELIGENTES S/A,
C = BR
CN = Prodrive Technologies B.V. OV
SSL Issuing CA,
O = Prodrive Technologies B.V.,
C = NLCN = GlobalSign CloudSSL CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CloudSSL CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign ECC CloudSSL CA SHA384 - G3,
O = GlobalSign nv-sa,
C = BE

32A4E554E363116FE48E22F01DAC1736752A71C720F99F462D565022D3BAD07D

88FC18BD071BE1FBC53FFBC801F03F5B2C4DA87BBA0C098E2B4808F19EAB05FE

AD7B58C3C5D9586BE5B62799C2792C4111C9852A96F7B0607221265713957E1
C
6B4F9DE13678846730D50E914A08E7BE9B742CA3A0A7D5393367830B93A6F55
3
AB74B1411AD23E2227FB88A2A9304A1A45A5C4840B3635F1036A46E8374279A
C

580BB3AB127F5E13E940AE7365E3C69A62AD204D7FDFA451592FE7C47DC02A9
5
E0C2EBD1F6BAD4FEAAE31A3107E69ABEE902DB38B9DFBE33F0570BDA3494C20
A
4B7334E1D8999822BAFA8FF6888125389B18A4E5AB26FFA624C7F68FDC81F0CB

B0CD6AE7B9E20EC5F830FEE01F666D5D90E6E229D06BC46A30ACCEDFEC889648

82

83

84

85
86

87

88

89

90

91

CN = GlobalSign Organization
Validation CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign RSA OV SSL CA 2018,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validated ECC CA - SHA256 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign ECC OV SSL CA 2018,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validation CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign ECC384 SSL CA - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validated CA - SHA256 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validation CA - SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validation CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OV TLS
CA 2020-12,
O = GlobalSign nv-sa,
C = BE

0B339212D7CFF17A2C59E35669B58E77350133750A78DA9404770EDD470DEF76

B676FFA3179E8812093A1B5EAFEE876AE7A6AAF231078DAD1BFB21CD2893764
A
65EEC0CC6C970CC1CD73659115DC8D904E6F12E6DC8FD4DDA39D54CB3022478
0
87C71553445EB3C33C3E0710711B99E9C7773F04D91AC38A9F4C082EE24101EA
74EF335E5E18788307FB9D89CB704BEC112ABD23487DBFF41C4DED5070F241D9

DC6C44AC8A3CD5C3451273F4431526B2EF666062EE763258A928F60BD08E39FE

1E1741A12EB8DA2BD76EA96C04F520359839710F620E80952F48DD0240A12CD
8
699D54B7482A5D329331EA0415CC2EDCD60FDA01D19E71D054196BCE0677735
C
1C9737E968AD9DFF8D8D7FCF996A144BB97851A19011A0190C943CAE8D43CFE
0
2EB8A1317288F08233E6883CEBE67EA6A0989E22ACA42C58D59F5A834E02C513

92

93

94

95

CN = GlobalSign Atlas R3 OV TLS CA
2020-12,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CloudSSL CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CloudSSL CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = Beame.io CA 1,
O = Beame.io Ltd,C = IL

A6032CC352F1E2E3628E162A3047BC7D647E2D601A2C0F26CAAF9AAF7A54239
C
E155EBF96334E79AE2E287D55CFC9185DE24935A653F13C5BA05AFF818771BC6

C2E4236DB1B757B51B77921388EFA823E6A600FD4BDA30B63AB77886F25618B
7
0D36F6A2299E9E268F94ADB49E57E6717D713C3F47B889C40DCDC8CFE940CB80

EV TLS Issuing CA
#
96

97

98

99

Subject
CN = GlobalSign Atlas E46 EV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R6 EV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
5E2A73EE6069DE65322DCF0430176B385F5238C296EE4392E7ED7DB4BE908A40

398DC562DC098CF75F3A151216E583380C279444B0D63E766D9FDF6F47D04C60

256602DC8A8041B2EDC0CAE611A6A98D9B39AD4DE3E19F62DC0A0A1958B7227
1
9C9D5E986B5BEA7A1EC8457EBCAA600D2435803B91FEC97C4E5043BE6742D4B
1

Additional information

100

101

102

103

104

105

106
107

108

CN = GlobalSign Atlas R46 EV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R6 EV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R6 EV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = CUISEC GCC R3 TLS EV CA 2021,
O = 联通智慧安全科技有限公司,
C = CN
CN = VTB BANK GCC R6 EV CA 2021,
O = VTB BANK (PJSC),
C = RU
CN = GlobalSign GCC E5 EV QWAC CA
2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Extended Validation
CA - SHA256 - G3,
O = GlobalSign nv-sa,
C = BE

4CFA14BC7E8F48D4677B0604777AF76AB0C55B326F8B97BA95F6ACE115C05F16

C9A74009DAE194A40BD122ABD015D44E93CB7879B0949054A31042EF4C99E5D
6

0ABB1CDE53CCAC170483DAFCD3CDB9F2622BA7E47D31EC0FD3DB271B4AAA530
3
385AA00A1848F807F665561E888B0D4F69614052D825F3C33970E00F4C3658DD

44E683576E1C960D784D17BB2325C25CF1BE4E20470C31D9D73CACED496C95C
9
9BFABD8D91284500B4D412C5725C87CB3A013F940FF1E62810E6929C69393ED9

52C09A2CA179368703A1857004CD5A3C87D3BDAC3A558E143EF3508FBEEB103
2
0DD2C7E0AF8200F49F4192A89AE634D4CE41B80C63B0629CC68E538C316F020E

AED5DD9A5339685DFB029F6D89A14335A96512C3CACC52B2994AF8B6B37FA4D
2

Revoked on April 06, 2022

109
110

111

112

113

114

115

116

117

118

CN = GlobalSign ECC EV SSL CA 2018,
O = GlobalSign nv-sa,
C = BE
CN = Valid Certificadora Digital SSL EV
CA 2018,
O = VALID CERTIFICADORA DIGITAL,C = BR
CN = Soluti CA - EV,
O = SOLUTI - SOLUCOES EM
NEGOCIOS INTELIGENTES S/A,
C = BR
CN = GlobalSign ECC384 EV SSL CA G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R6 EV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 EV QWAC CA
2022Q1,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 EV QWAC CA
2022Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 EV QWAC CA
2022Q3,

8F19FFE02FC795ED70765D1436ADDF772FE0F0773DA436EDBDB42A2E30E2E828
8AEFEBD88BE87A30B19C60C5BD0FB5E9FBCD15D5582D5FC9A7499578D68DCEC
0

11FBA4A7EE579C70E1D57F9F9B6A8C209E1219C4F1D3846F83FFCE74E9E5E2CE

15549187490314F5177641F0BEB32634AA1230EB2CF2C28AD9C73914FB18ABA0

BCE7091355D2417A37F8CFE2AC8F17C2748888BA0EEA90000FC980ECFC2D041F

364DF25CC88F6FB0202C02CD9B8EA02DFE8AC02341EFF5A9DFFC5BE159ED5991

E1E15D289697AF3285BF34112A3E60BC11C0C8122DD2B9B3420AB2E5E57883C
A
F2BC379B1EF45624D8F822B6E359502D470F384E53C082F7AE21869C13A5D345

250AFA50B60D30D1217D00E7DD8CCE6B51F5C0B6A6369324842C37DEB44F971
5
9D51DC2750A13BD627D99FDCC720D1904FE81059110BB9DE11B039A4B2ECA53
1

119

120

121

122

123

124

125

126

127

O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 EV QWAC CA
2022Q4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2022Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2022Q2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2022Q3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2022Q4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R3 EV QWAC CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC E46 EV QWAC
CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV QWAC
CA 2023Q4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV QWAC
CA 2023Q3,

451FA3A18064B4DD03ADFE8B8BBF16258CB98A1A6FEE5D6B0A37C98A0B5E6DA
E

4D81D18D57CDA96440CBFD0FA05CC387B7C69DE3A9E68B4036E1168EE2B7BD2
1
ED2B6C6F6C669EEC6C158B0FD61E4454185C42842523866F3B3EE9B1F0F62882

0DA5820FDFE4FCF9B9F94C140DB0F06D670D86FCB1BDD9597BCA8731532F353C

4EF99E6A8B14F69938715371B1D853472534CBF595A743CE993E7B386F99B895

D4A5941C7141ED1949A0C6CE9DD45A0AB94DC337902EB0A1209852738EEBE85
4
AA76C50166CD1B865B78D795C2C87A48D4A6229E65F8B38DBD005154EB2ED2DC
B51D85A08FACB06F97FDF58563749003033EE77DD583986204499197CA8E7077

29C840D062AC862DB4D20928D2AEFD83B35A46BD4533995FF2EFD3E3EE8CFFD9

Revoked on November 17, 2021

128

129

130

131

132

133

134

135

136

O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV QWAC
CA 2023Q2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV QWAC
CA 2023Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2023Q4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2023Q3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2023Q2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2023Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC E5 UK EV QWAC
CA 2021,
O = GMO GlobalSign Ltd,C = GB
CN = GlobalSign GCC R3 UK EV QWAC
CA 2020,
O = GMO GlobalSign Ltd,C = GB
CN = GlobalSign GCC E46 UK EVQWAC CA 2020,

A40C91E466D62CDB32B7139E8748F0EB5A817F6BB8A9F999A7A9BF4306D6D5D
5A7DCFD3D09377C39BA3A7F630E052EC593E9726D1DA57229E599D15AD6DCCA7B
2DA52277662DC1C779E2439FAF58F85F87DBA73E0F16F1B0EB310A4919CFC3BA

430B172A6F7146B16A75BCC5BFA1D60C61DEEAA2ABAC61B4394E4A6B291C48C
C
F4C5F3956379493830DE7456E0A55D6FBC1B8EA08B756488FF005B6C394A69C7

F9120A71D50697B9992A7357A0A9A0DDC4BFC3598FCB4F01642964824D3CF27
6
0966A88729C938F9DCD65BB3C63B608618EAE5183ED1FED752B323089687A20
E
A33017D9DF494C09D58709107403AEE461B9461E81BA395C28C36693C27D198
68814C0688344DE0F21AD1BD076E9F3248AF430E4FE760952E3A150DFAEDCE016

Revoked on November 17, 2021

O = GMO GlobalSign Ltd,C = GB
Other CA
#
137
138
139
140

141
142
143
144
145

146

Subject
CN = GlobalSign Root E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Root R46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign ECC Root CA - R5
CN = GlobalSign Root R46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Root E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R6
CN = GlobalSign Root R46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign ECC Root CA - R5
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R6
CN = GlobalSign Root E46,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
1DF6054D6641404633641BB5FA3742FDA7D075E2514840AB61E00CCBBB7D341
D

Additional information
Cross Sign CA

45CB1D874CB03BD5C5B6E079C8FC29E51521EE5628486301964A41F94BA59F88

Cross Sign CA

3F319B2AFED4A0F75127BE59925550D0428E68763A09E273EB6A9FF8D18DBB5B

Cross Sign CA

A63C1398B5F8DD2D432FBE4C2C19142BEA6D5D0221FAE794718AE7597ACCA96
D

Cross Sign CA

0F1554C2FD591B0256A608E1C136A837E7A6E041561EE08A911B2AFDCD3C6C1
B

Cross Sign CA

DDA8DA736187D76F4F0ED5A5F667B54D99A98AE06091D0E3A01714E9221695A
D

Cross Sign CA

A5E33C28E3013A71F5F760AE3B16595090043D2EC5209EC52903C4FBAD258DA
D

Cross Sign CA

F349954E8FB6D44011BCB789D97D9A2CB2032BD5F0B598D1FB8A099F5848D523

Cross Sign CA

C84E1378B974A991ACDCDD733421E3061E6FA21A0491C8902BAFDE3855E0063
E

Cross Sign CA

33EF151EFB08D1C44FB85CC3F23EC6873014E9F881691BD4938B7F251580B694

Cross Sign CA

147
148

149

150

151

152

CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R3
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R3
CN = GlobalSign Root CA,
OU = Root CA,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CA for AATL SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CA for AATL SHA384 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GTS Root R1,
O = Google Trust Services LLC,
C = US

445EEC78BC61215044A0379656AA2D5DB5E42F76CB70B8D14C2077AA943D4EB
B

Cross Sign CA

C94FEDDA4E8608908580BC7F87B434E03BB262E42F64C63820A8F50FB17C1CEC

Cross Sign CA

6ADD368DA35458A09EDF880D0570E863ADC8507D49406B4D97E44E53BC9308C
9

Cross Sign CA

AA89C466E9D06882C0DAAF72BE0F0FBCFE7C1EF2AAAD190640C4AD44F5517F34

AC0AB963BB5F3DA05FBC8687F98C2B6EA0BB499E6118C1A9136B1BC7C3C71A6
B
3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5

Google Cross-certificate *Timestamp CA
#
153

154
155

Subject
CN = GlobalSign Partners
Timestamping CA - SHA384 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign TSA CA for AATL,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA SHA384 - G4,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
2A015531A5F3A4CE589BD853C71DD069587322F574D85C9C9B9F9DF8F86C075E

4D8EB49380EC72AC9FDF21FE1C6DB2E9490C76BEADD1F7B528C3CCD272C8FE28
F642418E4D0C63DEC785C960EFA68BA745F38851744EF81F225CB89305314D50

Additional information

156

157

158

159
160

CN = GlobalSign Partners TSA CA forAATL,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA,
O = GlobalSign,
OU = Timestamping CA
CN = GlobalSign Timestamping CA R3,
O = GlobalSign,
OU = Timestamping CA

7E8F914119BB1090D6204908E5AE1F40BE24C1491CD7D5CFB6A93618CBC00FD9

C977923C771E1A66C925A2B6F501732E678DC9887AFE6BFAAC039D1D9A71F0E
C

9BF9496777D14425ED0086C1BB2C0707B62A61C194C5162E4F07637AFF166B76

D0CAE6947BC77F0B495CA808D6CDE685FCD20225E1E530B635B113ED40728EF3
61C1067083AE044EF1D649CE590BBF09D9D739E025DA8D195F71CFAAD6EBAE6
9

The following CAs are not capable of issuing working publicly trusted SSL/TLS certificates intended to authenticate servers on the Internet (i.e.
certificates containing the id-kp-serverAuth OID (1.3.6.1.5.5.7.3.1) in the extendedKeyUsage extension) and they were in scope only for the
Network Security Requirements:

Root CA#
1
2

Subject
CN = GlobalSign IoT Root R60,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign IoT Root E60,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
36E80B78775DDA9D0BAC964AC29D5A5EC4F3684E0C74445E954A191C2939B8E
0Additional information

43ED443C1F0CD46C9914B4272C24DC42CF6FE62B4AAB37585878A26D882AE4C
B

Non-EV Code Signing CA
#
3

4

5
6

Subject
CN = GlobalSign GCC R45 CodeSigning
CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CodeSigning CA - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CodeSigning CA - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CodeSigning CA SHA256 - G2,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
74D499A72D0BA5D4DDEC55805ECF157C891E45E5D490A19DC5FD4476954E774
B
4047C9D69260C07213BCB8608A7EC5E2838A56B79F67847812EAC0778D0D27F
1
FFFE077503FD72F0E5338B0A7B4E218E7D1FF82E493E7E852AE51AA1C7585D17
BE40813869AB27A071D12AD6A8830583EBC3B618E3F2346359F4B11A1C9434E
E

Additional information

7

CN = GlobalSign CodeSigning CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BEFB54EEA9BCE8E9EA9782154F3D414277FB709F49B947D73978AC278546C2CE03

EV Code Signing CA
#
8

9

10

Subject
CN = GlobalSign GCC R45 EV
CodeSigning CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Extended Validation
CodeSigning CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Extended Validation
CodeSigning CA - SHA256 - G3,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
CD0E144DD10BAC221FE2FB901058D16450A0578B3C47C770908F2E9ADA28EF12Additional information

1E864278C20881B671C0C6D2E14B61150AD1F13CF92C6EC14B550DCBC47E1541

DD038E87E0B4D2C369680D3DE78638AB39FC1D7E50632996921101768DB8D4D
8Other CA
#
11

12
13

Subject
CN = GlobalSign Timestamping Root
E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
OU = GlobalSign ECC Root CA - R5,
O = GlobalSign
CN = GlobalSign,
OU = GlobalSign Root CA - R3,
O = GlobalSign

Fingerprint SHA-256
24E9A5B561CDFEFEEEB73245DAC1B04465C513F936621D21902DD8A58FD6C461

Additional information
Cross Sign CA

0AED971671F8FE67EBA28817550AFEE946FDC2C52250003A6CFB87BC5AAD8A04

Cross Sign CA

2510E248903F01B63F9398179E5506979F0EF507E4174B657AF6F770A417EC94

Cross Sign CA

14

15

16

17
18

19

20
21

22

23

CN = GlobalSign Timestamping RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Secure Mail Root E45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Code Signing RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
OU = GlobalSign Root CA - R6,
O = GlobalSign
CN = GlobalSign Code Signing RootE45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Client Authentication
Root E45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Secure Mail Root R45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Code Signing RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Client Authentication
Root R45,
O = GlobalSign nv-sa,
C = BE
CN = AbbVie Atlas R45 AATL CA
2022,
O = AbbVie, Inc.,
C = US

6AFBC07C724C6F75C7743392F32BF5780BD5DD39268544D4882E7AEC1ADD028
2

Cross Sign CA

5B87841E80AAFE877804E56694473DCA8BB9F1FF4FFCF885A3DAFD24463FCB64

Cross Sign CA

6385DDCD1B768648267EE5122897CA085FC45D6030ECB55098F583AF152AA4A
6

Cross Sign CA

75BFB522CC4B58DA22EE488517C5F2EFF92576D20F595F9ACE483A036FC1BB6B

Cross Sign CA

E506B72BB97A14D24959A0D1A977E1ACDB6155D68FB4846885E544D147E7D57
7

Cross Sign CA

F375270F2F216B9F62CC31795619F6FE1943DF65D1B198D3341170A40725BFC7Cross Sign CA

5268C94573AF66BA5A3DE979F2048DE43BD4B68AF0B73A2D639159FAFE637F69

Cross Sign CA

05E0634B1FEB98AE6B4CF101728CF9D5A1793CEACE301506FF332B22D4CF08EB

Cross Sign CA

3DA135562E942799D547CA72EA57D7AC03791B24D4E24BA2E1E1331E8A1678F
0

Cross Sign CA

6FD7EEFF0B14D389FC8115B4FCDF64EED38F29573F0B3969C71BEB0FE55C3F5B

24

25

26

27

28

29

30

31

CN = Statoil Qualified CA,
O = Statoil ASA - 923609016,
C = NO,
DC = statoil,
DC = com
CN = GlobalSign R45 AATL Root CA
2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC R45 UK Qualified
Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC E45 UK Qualified
Authentication CA 2020,
O = GMO GlobalSign Ltd,C = GB
CN = EUSPA AR45 SMIME CA 2021,
O = European Union Agency for theSpace Programme (EUSPA),C = CZ
CN = COMESA GCC R45 SMIME CA
2021,
O = Common Market for Eastern andSouthern Africa Secretariat,
C = ZM
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
Authentication CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas E45 Qualified
Authentication CA 2021,

5E297C0107659C8068CC7674635E56F74D05BFD6E687D3075FC48C7E8FF70D95

B296DC3BCF451217D7AD4F84FB8EE25CC92FC659CAFA0EB4A8B5B4DB3D0215C2F5E9E2705AB0C93E80652D2DEB573AB01D6700597BDA122BC08BA97FDC71336
8

1DBC5465732AC3232FF12641C2898EA0F239D06186DD1B085496ABC6E5BD07F
2

A2F5C0CD7364E1123B21556FB7999BEA8E9F0AEF399A3544CD12EB83C238BA1E

C50DECEFBC246CB07F4FEB282A7633337721F787F8EB68D897F05284FF94FA8A

9BBAB193D19DBA9BA86497C633E89EB421131D29B64129B449832BEC2CC8259
F

102DCE6691C0B6DF7CD2521AF88C3546D7582A2CB7DAAD087F9C7DB2AF8351C
5

Revoked on March 31, 03

32

33

34

35

36

37

38

39

O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
Non QSCD Signing CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
QSCD Signing CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas E45 Qualified
QSCD Signing CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas E45 Qualified
Non QSCD Signing CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC E45 Qualified
Authentication CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = NAESB GCC R45 Client
Authentication CA 2020,
O = GMO GlobalSign Inc.,
C = US
CN = InComm Agent Solutions Inc
Atlas Issuing CA 2020,
O = InComm Agent Solutions Inc,
C = US
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC R45 UK Qualified

96B67EB3D828223480405557E3993A3B1781D527294D1978EB0C4ABCC6F40AF
2

7A25E3C7B2B3325C5E65D01B9F6FF474ADE4BBCC8CCA3D7F29655352386F36B7

625597092D6B09F1AB74ECF29F38E0E1C41AF487594B23489A8A604687ACAD99

DBFF9EBA713FF77B60D52B37F35C5AD52D9CD06412F3BAD9128D77D95C7B887E

5F2155F9A7444615C673994CDA99E963BB558A367B20305520E93D15EF3AF4E8

5EBD04144508FADD1B9DB79FF62B826D6FF893987B1534C0F8EEC2261D6AC452

4DFD9A61EB32208A94F15719FF2EC71449BCB0F344C18D5D1D3994A6C30EC92E

EEE8A6FBDE0B1340552AE739832A686FE96103435AE1FCE9392D655E00D8670D

40

41

42

43

44

45

46

Authentication CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC R45 Qualified
Authentication CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R45
PersonalSign 3 CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC E45 UK Qualified
Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC E45 UK Qualified
QSCD Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC E45 Qualified
Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC E45 Qualified
QSCD Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign E45 AATL Root CA
2020,
O = GlobalSign nv-sa,
C = BE

E042DA36AA8B9A290A525B63AFBBD42E3DBA8286F7100C7981799C6EF2F8919
C

50161C1232F32E8057879F9C7651A9088F5AA1EF5AC9A9A4BD445C6E788EA6F8

28CB8EE23E7BDBBF40B2959A57BB589991C2635CD3B71AAB0E84F993C559D29F

712C42F3C0FA3BDFA11B22AC9811C8EB912C4B464B43C705825DEEDC1195AD3
3

35E9429CDE680D8D5311CDD46FAEF0AEE694B0556C3D69C4F670E243D64C87FE

8115E2CB4F04E56EA70EA932D0622831DD53B22BF6A93B3ACD9125FAB0374AF
187903E20623512D28BDBFACE4D41BD50F5BA6B1B2E8CCAB134CE161769EAEC0
0

47

48

49

50

51

52

53

54

2.5.4.97 = NTRGB-04705639,
CN = GlobalSign Atlas E45 UK
Qualified Remote Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas E45 Qualified
Remote Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC R45 UK Qualified
QSCD Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC R45 Qualified
Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC R45 Qualified
QSCD Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign Atlas R45 UK
Qualified Remote Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
Remote Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R45 AATL CA
2020,

B89EBBFC57AE60653C676B8EB399DC9415BBB738CB0370651A86BFF075C83A39

5CB0FDEF052BD18A0A40ADA2235F46EB42B6D0993ED5A50DE47E3EA12FF191B1

91F881C556A920B92C4C48221FAAC19615437CF4ACB7D079C0B426BF3483B3A
E

4E1474CFEB41D048C7E1E2C975D69AD3FD739BD44577A80D0432F233D51C5C7
7

1B728D4A76506634A11007912F1D8C6B9AA39BE1AFCA49096657CF1FFB4513BF

0958E7A84F392A4F3B7DC5E30FDC8DF733E69B44C68C16FC0DA1741C08419DA0

323F35F0DFB01D6B478C24026C66852AAD3E96DCB1C5BE17C1DA1EC47D77CC87

BCF8D9040635C95E84F9FEDDF36F9422C0D215C23798E9C2D5F3798ECF27B68A

55

56

57

58

59

60
61

62

63

O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R45 AATL CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = European GNSS Agency Atlas
R45 SMIME CA 2021,
O = European GNSS Agency (GSA),C = CZ
CN = GlobalSign Primary SHA256 CA
for Adobe,
OU = GlobalSign CDS,
O = GlobalSign nv-sa,
C = BE
CN = Statoil Qualified CA,
O = Equinor ASA,
C = NO,
DC = statoil,
DC = com
CN = EY LLP GCC R3 SMIME CA 2020,
O = Ernst Young LLP,C = GB
CN = RWE Atlas R45 SMIME CA 2020,
O = RWE AG,
C = DE
CN = GROB-WERKE GmbH und Co. KG
GCC R3 SMIME CA 2020,
O = GROB-WERKE GmbH und Co. KG,
C = DE
CN = HERTZ GCC R45 SMIME CA
2020,
O = The HERTZ Corporation,
C = US
CN = GlobalSign Atlas R3 SMIME CA
2020,

65573E11BB13C6ED115E0B90E2C30B1E4DE4D5CAC1B31EAB2D417C32A3DA5D79

F4EFE27C6B037747B3A89E23EE23C1B70A24DEB53B2E02F423BB0F73E1822267

8B8AAA67E1EB067303F09E17A505CE7B6CA1C8DC0E1DB59D982B579C69D644E
1

0A665640BE77300E0DF23752F324499E132A99A7E5A81879AA9E58B65F501C97

3A093122808FFFA440E19824D0BC7CD6B01D8D8277F7F42FA16E80A0205D4A7A
BEE8FB99D7B9EC0CAEF1B1A6ACFFEABD777E31CBAC2D0E1846BDAEC4D5B18BE8
B75840FEA15C545335CD4BA58B707F53524CE984655AEBCC248A57E6F2403A8B

013C13426B92F703BA573D9E16C2E35AECA26C60F606B88D3CE2150C94D56C1
4
479D6A0980722966237F06C41842EE796B55D4D00A0D663B785D48433A29156
E

Revoked on March 31, 03

64

65
66

67

68

69

70
71

72

O = GlobalSign nv-sa,
C = BE
CN = Accenture Federal Services GCC
R3 Global CA 2020,
O = Accenture Federal Services LLC,
C = US
CN = GlobalSign ECC HV S/MIME CA 1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Corporate IT Atlas
R45 SMIME CA 2021,
O = GlobalSign nv-sa,
C = BE
CN = CBMM GCC R3 SMIME CA 2020,
O = COMPANHIA BRASILEIRA DEMETALURGIA E MINERACAO,
C = BR
CN = DPDHL User CA I5,
O = Deutsche Post AG,
C = DE
CN = GlobalSign Atlas R6 AATL CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = AbbVie Atlas R6 AATL ICA 2020,
O = AbbVie, Inc.,
C = US
CN = Trusted Root nonTLS CASHA256 G3,
O = GlobalSign nv-sa,
C = BE
CN = DSigner GCC R3 SMIME CA 2020,
O = DSIGNER, SOCIEDAD
AN\C3\93NIMA,
C = GT

9D61B40ECFE094B415FBF6AEEA1FDB27A1A4C3B6FD9008D768777D6D7FBAAEE9

E0CE5C4EF5D2186963D2B04ADE4612BBAF787E16048A5B468F7367776C3A03DE
7C4E78C74B4818D17EF8B8AB91E32DB4F7E3CE84A0C5E47AAA62AE39FAB60D01
F6F9C3FC5636C7E800EB1BDDFD33AAF98495C130DBF48F9BAF4AB7A1F665DFB4

163B5F69720164075C16CE760A93C85D5073CD5A0D41C7A3AFB0B5E75B3DC64
6
96D0E059827A7C99BA5CF586D1B77397A3C83777C467BF1914762AE16ABE383
46509F94BCA4DC619F3E732D533ACD3D0F10ABA102A13123B6AF737C8E12DAA2
1
3A30D4A3043F195609E30F747754699CC6CC97E1F5FCB83DE87E659E579E39AD

3FA4A9B65FDF6876FE668DFECC434932EBC254FD741119FC432A5989A085F320

73

74

75

76

77

78

79

80

81

CN = Hyperion GCC R3 SMIME CA
2020,
O = Hyperion Services Ltd.,C = GB
CN = GlobalSign GCC R3 PersonalSign
2 CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = JCAN Public CA1 - G4,
OU = JCAN Public CA1 - G4,
O = JIPDEC,C = JP
CN = CRB Group GCC R3 SMIME CA
2020,
O = CRB Group, Inc.,
C = US
CN=Quálitas Compañía de Seguros
S.A. de C.V. GCC R3 CA 2020;
O=Quálitas Compañía de Seguros S.A.
de C.V.; C=MX
CN = GlobalSign GCC R6 AATL CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R3 PersonalSign
1 CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = Giesecke and Devrient CA,
OU = Corporate CA,
O = Giesecke and Devrient,
L = Munich,
C = DE
CN = FIFCO Atlas R45 SMIME CA
2020,
O = FIFCO,
C = CR

9537738522B6A87FCF8338CF270203CCF1A7770BB14BB23FA2882A05FFB804E4

F0DBB9E90E6643CCB23660147E5DE24760440089D96F4AD0D82F66C3E7DA5C20

9AC4C8E358C095C998122ADD17A336C0AC597ECBECB7EDC3F58A75040CF94A5
F
814179F36A71529C915C540261E44638E37A4FCE879740F0CE7351A8E9291A03

795A8468D098E3729E6A17920AA6D8F27E84DC180F85C9B28A77FB368DCC789
5
75CC6021036890EAC71853FAE8382CF8DB33DC41706F42AAFE421E98AD38174C

583C7FC250856B7F947FC7CC076FE216273CA1713D122C2E5D8F6038FD6E3562

4AB23AF5233FD65FBD981973515A7379C76B9B852A5B4E35890B7F60D1923A4F

80642AAC7C782BCDB0C3F6F385488F9BE3BB2DE30B863009E74B29F026C9EAE6

Revoked on March 31, 03

82

83

84

85

86

87

88

89

CN = Trafigura PTE Ltd Atlas R45
SMIME CA 2020,
O = Trafigura PTE Ltd,C = SG
CN = Spirit AeroSystems GCC R45
SMIME CA 2020,
O = Spirit AeroSystems, Inc.,
C = US
CN = LinQuest GCC R3 SMIME CA
2020,
O = LinQuest Corporation,
C = US
CN = DexKo Global GCC R3 SMIME CA
2020,
O = DexKo Global Inc.,
C = US
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Remote
QSCD Delegated RA CA 2022,
O = GlobalSign nv-sa,
C = BE
CN = Ford Motor Company - EnterpriseIssuing CA01,
ST = Michigan,
L = Dearborn,
O = Ford Motor Company,
C = US
CN = InComm Agent Solutions Inc Root
Certificate Authority,
O = InComm Agent Solutions Inc,
ST = Florida,
C = US
CN = Giesecke and Devrient CA,
OU = Corporate CA,
O = Giesecke and Devrient,
L = Munich,
C = DE

36FCE16CC976727765DF5E9FADB12C544D704C35150D1F17DDE1A42A85B88BE4

90D87E23B012A357851472CE9F4E49201F67BA9EC1FB9CD236C0C5AAA15FFE9E

DDD73ABF0259F18F77CA598C2745EA18243526B10D371D7E3B088D68C88C0A9
7D531F24E655D1F28A344BD3E0E9B141CE88A4139C61CB0CF5184EF2E2B9531A7AD304215A70BF5D06E84973BF49862F10CFF490DA9C97D1D6FA6934F8E3C98AF

7B96DA88C60AE48624F480217865FEB124719022F49E58EE830B3E93D36D9AEF

ECF5DC23556585AE8F9CE5BA0955F982AFF77E975F84C53F4A098626C20BFE5A

A53FB60B6C9CEC1175C729BB8A34D1AA1DA85AF234E41603621D98394002640
0Timestamp CA
#
90

91

92

93

94

95

96

Subject
CN = GlobalSign E46 AATLTimeStamping Root CA 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign R45 AATLTimeStamping Root CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign Atlas R45 UK
Qualified Timestamping CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
Timestamping CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign Atlas ECCR5 UK
Qualified Timestamping CA 2020,
O = GMO GlobalSign Ltd,C = GB
CN = GlobalSign CA for AATL SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas ECCR5 Qualified
Timestamping CA 2020,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
2A34A0225DBC82845E8C5F2F13897179A9B2D91E74D93BDE0021F4F89804E59F

3A6224E6EF98D0C4770C229E89CFA346623DF5A250D4B68D04CD5DA4BD85C4C
E
4C03F2D6941F2DFCA27EDC599F385E6CD3FFD0CC842F2CCB95B77580A2D1FF93

D86E6264D58E4CA78AF419740D8186EA8EC48F0C33B4B4D7CA027931D627B1C
840382F8827B75D25705A6B3DA32533C5F4218BD7FA697CB0B300E8F47047FBC9

2E8820DC0EAFAE3D6D285C057ECE14470B377438B002CEDD4C72B4F343A54F43

E55A4FE881A4B0433674EC0E5CC261A99CCE3FEF649528C7218085BEDCD11512

Additional information

97

98

99

CN = GlobalSign Qualified Time
Stamping CA 2019,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA G3,
O = GlobalSign nv-sa,
C = BE

74ABE5E5CCEB75491FF72C4CF325405D8ADBFE390E189CF430BA60E62798878E

BE33D1C57EBDDD927B57BDB604BE457B552FE568E7F3DCBA093C39ED1C30A23
9

95C6A747DD0BC755A1941827E894B8083592241B792541E2EB1B30FB9B13F57F* The cross-signed certificate was signed with a key controlled by GlobalSign, and the certificate is subject to GlobalSign’s CP/CPS. While thecross-signing establishes a trusted relationship, the cross-signed certificate is not controlled by GlobalSign.

Appendix C – Locations
Location Identifier

CountryState / Province

BE-01

Belgium

Vlaams-Brabant

CN-01

China

Shanghai

IN-01

India

Delhi

JP-01

Japan

Tokyo

JP-02

Japan

Yamaguchi

JP-03

Japan

Tokyo

JP-04

Japan

Tokyo

JP-05

Japan

Tokyo

PH-01

Philippines

National Capital Region

RU-01

RussiaMoscow

SG-01

Singapore

Central Singapore

SG-02

Singapore

Central Singapore

SG-03

Singapore

Central Singapore

UK-01

United Kingdom

Kent

UK-02

United Kingdom

Greater London

UK-03

United Kingdom

Greater London

US-01

United States

New Hampshire

A member firm of Ernst & Young Global Limited

Appendix D - Publicly disclosed incidents
Bugzilla ID
1649937
1651447
1690807
1707073
1708834
1714968
1744518
1759854
1760311Disclosure
GlobalSign: Incorrect OCSP Delegated Responder
Certificate
GlobalSign: Failure to revoke noncompliant ICA within 7
days
RSA-1024 leaf certificate issued after 2013-12-31
GlobalSign: Invalid countryName
GlobalSign: Invalid stateOrProvinceName and locality
pair
GlobalSign: Incorrect RegNumber-Org Typecombination
GlobalSign: EV certificates with serialNumber
Government Entity and businessCategory Private
Organization
GlobalSign: Certificate issued to FQDN with malformed
CAA
GlobalSign: OCSP responder certificates with more than
64 characters in CN

A member firm of Ernst & Young Global Limited

Publicly Disclosed Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link

GlobalSign Management’s Assertion
GlobalSign NV/SA (“GlobalSign”) operates the Certification Authority (CA) services as disclosed
in Appendix B and provides SSL CA services.
The management of GlobalSign is responsible for establishing and maintaining effective controls
over its SSL CA operations, including its network and certificate security system controls, its SSL
CA business practices disclosure on its website, SSL key lifecycle management controls, andSSL certificate lifecycle management controls. These controls contain monitoring mechanisms,
and actions are taken to correct deficiencies identified.
There are inherent limitations in any controls, including the possibility of human error, and thecircumvention or overriding of controls. Accordingly, even effective controls can only provide
reasonable assurance with respect to GlobalSign’s Certification Authority operations.
Furthermore, because of changes in conditions, the effectiveness of controls may vary over time.
GlobalSign management has assessed its disclosures of its certificate practices and controls
over its SSL CA services. During our assessment, we noted the following observations whichcaused the relevant criteria to not be met:

1

Observation

Relevant WebTrust criteria

We noted that GlobalSign has issued
multiple certificates for which thesubject information was not inaccordance with the SSL Baseline
Requirementsi.e.,certificatescontained incorrect localityName,
stateOrProvinceNameorcountryName as disclosed in theBugzilla incidents 1707073 and
1708834 (see Appendix D). A part ofthese certificates was misissued
because of the logic failure in theautomation scripts used by GlobalSign
and a part of the certificates was
misissued because the information
provided by the Applicant was not
sufficiently verified as per the steps
established by the SSL Baseline
Requirements.

Principle 2, Criterion 2.15: The CA
maintains controls to provide reasonableassurance that Subject information of
Certificates conforms to the Baseline
Requirements, including:(...)• subject:localityName• subject:stateOrProvinceName• subject:postalCode• subject:countryName(...)

This caused WebTrust Principles andCriteria for Certification Authorities –SSL Baseline with Network Security
v2.6, Principle 2, Criteria 2.15 and 4.2
to not be met.

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Principle 2, Criterion 4.2: The CA maintains
controls to provide reasonable assurance
that the following information provided by
the Applicant is verified directly by
performing the steps established by the
SSL Baseline Requirements:• Identity (SSL Baseline Requirements
Section 3.2.2.1)• DBA/Trade name (SSL Baseline
Requirements Section 3.2.2.2)• Authenticity of Certificate Request (SSL
Baseline Requirements Section 3.2.5)• Verification of Individual Applicant (SSL
Baseline Requirements Section 3.2.3)• Verification of Country (SSL Baseline
Requirements Section 3.2.2.3)

Based on that assessment, in GlobalSign management’s opinion, except for the mattersdescribed in the preceding table, in providing its SSL Certification Authority (CA) services at its
locations as detailed in Appendix C, throughout the period April 1, 2021 to March 31, 2022,
GlobalSign has:•disclosed its SSL certificate lifecycle management business practices in the applicableversions of the Certificate Practice Statements and Certificate Policies, as stipulated inAppendix A, including its commitment to provide SSL certificates in conformity with the
CA/Browser Forum Guidelines, and provided such services in accordance with its
disclosed practices•

maintained effective controls to provide reasonable assurance that:o The integrity of keys and SSL certificates it manages is established and protected
throughout their lifecycles; ando SSL subscriber information is properly authenticated (for the registration activities
performed by GlobalSign)•

maintained effective controls to provide reasonable assurance that:o Logical and physical access to CA systems and data is restricted to authorizedindividuals; ando The continuity of key and certificate management operations is maintained; ando CA systems development, maintenance, and operations are properly authorized
and performed to maintain CA systems integrity•

maintained effective controls to provide reasonable assurance that it meets the Network
and Certificate System Security Requirements as set forth by the CA/Browser Forumin accordance with the WebTrust Principles and Criteria for Certification Authorities - SSL
Baseline with Network Security, Version 2.6.
Additionally, GlobalSign has disclosed the attached comments (Appendix D) that have beenposted publicly in the online forums of the Bugzilla site, as well as the online forums of individualinternet browsers that comprise the CA/Browser Forum.
GlobalSign
Leuven, Belgium

Signed by: Arvid Vermote
Function: Chief Information Security Officer
June 29, 2022
GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Appendix A – Certification Practice Statements and Certificate Policies in Scope
Certification Practice Statement

Begin Effective Date

End Effective Date

Version 9.7

March 30, 2021

September 30, 2021

Version 9.8

September 30, 2021

November 30, 2021

Version 9.9

November 30, 2021

March 15, 2022

Version 9.10

March 15, 2022

Certificate Policy

Begin Effective Date

End Effective Date

Version 6.7

March 30, 2021

September 30, 2021

Version 6.8

September 30, 2021

November 30, 2021

Version 6.9

November 30, 2021

March 15, 2022

Version 6.10

March 15, 2022

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Appendix B – In-Scope CAs
The following CAs were in scope for the SSL Baseline Requirements and Network Security Requirements:

Root CA
#
1

2

3

4

5

6

7

8

9

Subject
CN = GlobalSign Root CA,
OU = Root CA,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R3
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign ECC Root CA - R5
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R6
CN = GlobalSign Root R46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Root E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Secure Mail RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Secure Mail RootE45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Code Signing RootR45,
O = GlobalSign nv-sa,
C = BE

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
EBD41040E4BB3EC742C9E381D31EF2A41A48B6685C96E7CEF3C1DF6CD4331C99

CBB522D7B7F127AD6A0113865BDF1CD4102E7D0759AF635A7CF4720DC963C53B

179FBC148A3DD00FD24EA13458CC43BFA7F59C8182D783A513F6EBEC100C8924

2CABEAFE37D06CA22ABA7391C0033D25982952C453647349763A3AB5AD6CCF69

4FA3126D8D3A11D1C4855A4F807CBAD6CF919D3A5A88B03BEA2C6372D93C40C9CBB9C44D84B8043E1050EA31A69F514955D7BFD2E2C6B49301019AD61D9F5058

319AF0A7729E6F89269C131EA6A3A16FCD86389FDCAB3C47A4A675C161A3F974

5CBF6FB81FD417EA4128CD6F8172A3C9402094F74AB2ED3A06B4405D04F30B19

7B9D553E1C92CB6E8803E137F4F287D4363757F5D44B37D52F9FCA22FB97DF86

Additional information

10

11

12

13

14

15

16

CN = GlobalSign Code Signing RootE45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Document Signing
Root R45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Document Signing
Root E45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Client Authentication
Root R45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Client Authentication
Root E45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping Root
E46,
O = GlobalSign nv-sa,
C = BE

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

26C6C5FD4928FD57A8A4C5724FDD279745869C60C338E262FFE901C31BD1DB2B

38BE6C7EEB4547D82B9287F243AF32A9DEEB5DC5C9A87A0056F938D91B456A5A

F86973BDD0514735E10C1190D0345BF89C77E1C4ADBD3F65963B803FD3C9E1FF

2BCBBFD66282C680491C8CD7735FDBBAB7A8079B127BEC60C535976834399AF7

165C7E810BD37C1D57CE9849ACCD500E5CB01EEA37DC550DB07E598AAD2474A8

8B0F0FAA2C00FE0532A8A54E7BC5FD139C1922C4F10F0B16E10FB8BE1A634964

4774674B94B78F5CCBEF89FDDEBDABBD894A71B55576B8CC5E6876BA3EAB4538

DV TLS Issuing CA
#
17

18

19

20

21

22

23

24

25

Subject
CN = GlobalSign Atlas R3 AlphaSSL
CA 2022 Q2,O = Globalsign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV TLS
CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV
ACME CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV ACME
CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 AlphaSSL
CA 2022 Q1,
O = Globalsign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV ACME
CA 2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = Alibaba Cloud GCC R3 DV TLS
CA 2021,O = Alibaba Cloud Computing Co., Ltd.,C = CN
CN = Alibaba Cloud GCC R3 AlphaSSL
CA 2021,O = Alibaba Cloud Computing Co., Ltd.,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
45F1854530EC037AAACB4B2DE9B4D0FDBFC61888ABD4EE0414183D99E60437AC

15B63CDD772A8D42DC5E48174C1F7E3D40FC82C478DF3A6443C7BD92FBC6D5DE

735CC386EC1A82E657A5B451C94959611D3C7D0CBB1FD9D9EDB42C7192F8463A

7B063A9CD48767C475AA6BCED4667CDC56068F8B7B895125BC4EB24682EEB606

2DFE47E144ABB39F9FE451CECD352D9A9BD28982351E8B6524FEB101DBAB1FEC

A04FA69E84CCD44F5E526B558631E346B21417D4D1B606A08CADE3928DBF1158

92651CD48A0288AA3075354DDC15DC24D0AF8EE67015B68A145970A093475E19

8F3E5D6858B927D284FDB85A1B15875CD78E63B820C20DDC539CCD84B0C1A6AA

7AEDE5374ECA9FF34C5727C10DB982222D753157797449B88364F70EEFA0C24C

Additional information

26

27

28

29

30

31

32

33

34

35

C = CN
CN = GlobalSign Atlas ECCR5 DV TLS
CA 2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV
ACME CA 2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = TK Elevator Atlas R6 DV CA
2021,
O = TK Elevator GmbH,C = DE
CN = AlphaSSL CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV ACMECA H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 AlphaSSL
CA H2 2021,
O = Globalsign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV TLS
CA H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV
ACME CA H2 2021,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

727A9069A3C60D213584E616D5BF55DFD19C71A3976645EA6A73B18F83760D24

D9E4A803FB498EEE9379FCF90AC3067AE65D098CC77890C37E575E249CD7D7C9A262F7D653E6C745EEABEBF6672A756B501A82F06708F2B5E77916217037BBCA

988D6B2D87BAF43821C4D304BE2B0E8F325DC17B7A220E934F5C5B7BADFF8E1C

EE793643199474ED60EFDC8CCDE4D37445921683593AA751BBF8EE491A391E97

1DD095449FFB3CFF14B2224D596B83FD42F2B47683553C797D11150C918691BD

B254F3CDEAF1D29AB53CB439E80FB996F1E90A283E9B5085B8749D18E4F5987B

11B6DB5B68DCDF34479AE7E7B7BBAA7165905577AD83D474F2BB9717CE244CEA

6916DA916EE1B1E98CB31EE94730EECD7F2C077965BDB8D4E16A3B81C58A29B6

61B30CEAEA0C8C6397C3599829809CB73CA8F817BB9CDF000D7453E442438028

36

37

38

39

40

41

42

43

44

45

O = GlobalSign nv-sa,
C = BE
CN = CUISEC GCC R3 TLS DV CA
2021,
O = 联通智慧安全科技有限公司,
C = CN
CN = VTB BANK GCC R6 DV CA 2021,
O = VTB BANK (PJSC),
C = RU
CN = GlobalSign Atlas R3 AlphaSSL
CA H1 2021,
O = Globalsign nv-sa,
C = BE
CN = GlobalSign Domain Validation CA- SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV ACMECA H1 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV
ACME CA H1 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = AlphaSSL CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Domain Validation CA- SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = Valid Certificadora Digital SSL DV
CA 2018,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

692FE1B8BA2699531DE4CD2F52AE38FA119AB01F4B31AB78FE6DB3FDF03A7031

95BA96F72CB314ECD05CE0FD75D886381A368C8F5869F04BDD3024893F4E393B

1ABC5AD5BC3911A5B4A91E42BBA3212E2AA3DC80147EFE1D49572E4BE0532633

BFDF4CF3F143AD0DB912D8AB3A7C12F617B9EA60CE8B1F4E44F74270FB21B19B

70F5C63C4F112837AB99870B0ECB5D722EEA0B0D0DDB9320B98B99B9BD137866

E7757BB0C4942ADC108D092A17B812B1043E06A094DD5E214920325556FC6924

B65FE6A1BF2D52FF68B7D3E9D0F06B300A1C3F248309B70405CA7BDEC054BDDD

8C2410F76B149CA062B420AB611B6BF0A06E6E799A29587E4D4EC16D0537B7EA

37D080A5E9A526663E56EE20DE4BD9F7952DACC341491439080167AD5DD18CAC

FCF26FBC1B2A25A76AB4EA92B2CBEF367E0131091C802DA49898F78AE54B30F8

Revoked on April 06, 2022

46

47

48

49

50
51

52

53

54

55

O = VALID CERTIFICADORA DIGITAL,C = BR
CN = Valid Certificadora Digital
AlphaSSL CA 2018,
O = VALID CERTIFICADORA DIGITAL,C = BR
CN = Soluti CA - DV,
O = SOLUTI - SOLUCOES EM
NEGOCIOS INTELIGENTES S/A,
C = BR
CN = GlobalSign Domain Validation CA- SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R3 DV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = AlphaSSL CA - SHA256 - G2,
O = AlphaSSL
CN = AlphaSSL CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Domain Validation CA- SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV TLS
CA 2020-12,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 DV TLS CA
2020-12,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 DV TLS
CA 2020,
O = GlobalSign nv-sa,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

04DE47A9CDD3091CFC5EF6AAA3B7D4B53E13C4D4DC02364F6C0B408742EC3C76

5C452334D9C9C9A2EA42CC77A7165E1795EE9D84EB70CB784B47EA9D92A582D9

09BC1B137C031239EF788673E94EB17F5F3ECAB07D3ADBFB485E75ABFAAF3B9A

762538439509C411C437D3C567563E1378671281FC4A1464ADD031870843676E

933E4A2D8DB1FF9FF0E508EA7F1637E074F660FE6F365A2233DFC2B52C889D98
5A817EADA4AD78734EBB2CF674352D97F4352290C40EAF10E764B1EAC075B0E6

669E7727A92BE72D9718E16922DC1BC1492B1AF33FA4793E68D8778F19A2EBE0

6F335DD7CD4AAA1D9140F290E9E7B3498A7CC35A244AA300E146BA2D9D02B960

59F5FF92B608A0119FF1DD7C603E0EB16F4FEAD9D4717AC3BC62D286AE399CDA

72132ECF2F8C75B5F214C00ED14562E14912B7F2F4D2633180F3E4918980FEC4

Revoked on November 17, 2021

56

C = BE
CN = Alibaba Cloud GCC R3 DV TLS
CA 2021,O = Aliyun Computing Co., Ltd.,C = CN

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

0FBBBC699B65EA9B676F1042BE3F093224CB1F769F142579B8CA023AEDD6E706

Revoked on November 17, 2021

OV TLS Issuing CA
#
57

58

59

60

61

62

63

64

65

Subject
CN = Trusted Root TLS CA SHA256
G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OV TLS
CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OVACME CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV ACME
CA 2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OV TLS
CA 2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OVACME CA 2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV ACME
CA 2022 Q1,
O = GlobalSign nv-sa,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
91F19CE503C9FE7FF9587D8EFBEF7315AAEE77DC2D14526126493B4AD6FE801F

A816AFFF746EA0F0A0A064C0432F9D2B7D0CE79EC2D1E9940F4A186A25182284

AFDB3C396D85D19FBE58206DF0659EAE614C4AB18F5CCF20B783AAF0BBE96A03

CB2C685CB214DCD2F2CDA6E2C155AAF21A7E134BC0BCE808B1130C459125B0A4

D50B20ADFF959BFBEE83B6FD1FAB36FDE7941B960CFC6839AAC63B9FFDB46413

F9D3214AD6F5D6D2B3C8161F96028B76812B058614A66786B92C8FEBDAC020EE

536A35A3FA630379CF3B4D4B4E1395AF9CFED2243138E634E4369A31E2872843

218C470B78B02D39B84FC6892F5A1FE9C99D6B9A6B8B7471E039EDCFCA91004C

EA532E6D78FF00FD4F56447F7E0A47D239D945424B77CF0D15A795CB4EE602BD

Additional information

66

67

68

69

70

71

72

73

74

75

C = BE
CN = GlobalSign Atlas R3 OV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OV TLS
CA H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = Alibaba Cloud GCC R3 TLS OV
CA 2021,O = Alibaba Cloud Computing Co., Ltd.,C = CN
CN = CUISEC GCC R3 TLS OV CA
2021,
O = 联通智慧安全科技有限公司,
C = CN
CN = VTB BANK GCC R6 OV CA
2021,
O = VTB BANK (PJSC),
C = RU
CN = ATT Atlas R3 OV TLS CA 2020,
O = ATT Services Inc,
C = US
CN = CrowdStrike GCC R3 TLS OV CA
2020,
O = CrowdStrike Inc.,
C = US
CN = DPDHL Global TLS CA - I5,
O = Deutsche Post AG,
C = DE
CN = RNP ICPEdu OV SSL CA 2019,
O = Rede Nacional de Ensino e
Pesquisa - RNP,
C = BR
CN = SHECA OV Secure Server CA,
O = Shanghai Electronic Certificate
Authority Center Co., Ltd.,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

4E1A564C71A04288970E53C037D1CFC25C1F9BEFC5276CF3BD501EE262F04202

90AF1B61A082662A639CAA68C6A3FB41EBBA3760C351A4A1E89FB6DACAD486FC

31A096A1CB918876EE57C85B2349FC9CC2C2CB4FCF9BDD37787CE9DA57AF4790

C7F145D474F5DC20B27A64E1696179522469078B333FE8FF887B97CE7805E362

312AB012744F859EEF8AE0FA25D0259E89DAAF51B94FAC67DFC61060F0DB2207

DC2728331312E75C4D7B442F3BDDA790CB77A9D6AC854D5BCE18AC43CA59909A

78CB512DE48CEDCD7134DF57C973C1E1A07692B8F542A44ACEBB8BB776D55D59

32A4E554E363116FE48E22F01DAC1736752A71C720F99F462D565022D3BAD07D

88FC18BD071BE1FBC53FFBC801F03F5B2C4DA87BBA0C098E2B4808F19EAB05FE

AD7B58C3C5D9586BE5B62799C2792C4111C9852A96F7B0607221265713957E1C

Revoked on April 06, 2022

76

77

78

79

80

81

82

83

84

85

C = CN
CN = Valid Certificadora Digital SSL OV
CA 2018,
O = VALID CERTIFICADORA DIGITAL,C = BR
CN = Soluti CA - OV,
O = SOLUTI - SOLUCOES EM
NEGOCIOS INTELIGENTES S/A,
C = BR
CN = Prodrive Technologies B.V. OV
SSL Issuing CA,
O = Prodrive Technologies B.V.,
C = NLCN = GlobalSign CloudSSL CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CloudSSL CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign ECC CloudSSL CA SHA384 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validation CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign RSA OV SSL CA
2018,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validated ECC CA - SHA256 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign ECC OV SSL CA

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

6B4F9DE13678846730D50E914A08E7BE9B742CA3A0A7D5393367830B93A6F553

AB74B1411AD23E2227FB88A2A9304A1A45A5C4840B3635F1036A46E8374279AC

580BB3AB127F5E13E940AE7365E3C69A62AD204D7FDFA451592FE7C47DC02A95

E0C2EBD1F6BAD4FEAAE31A3107E69ABEE902DB38B9DFBE33F0570BDA3494C20A

4B7334E1D8999822BAFA8FF6888125389B18A4E5AB26FFA624C7F68FDC81F0CB

B0CD6AE7B9E20EC5F830FEE01F666D5D90E6E229D06BC46A30ACCEDFEC889648

0B339212D7CFF17A2C59E35669B58E77350133750A78DA9404770EDD470DEF76

B676FFA3179E8812093A1B5EAFEE876AE7A6AAF231078DAD1BFB21CD2893764A

65EEC0CC6C970CC1CD73659115DC8D904E6F12E6DC8FD4DDA39D54CB30224780

87C71553445EB3C33C3E0710711B99E9C7773F04D91AC38A9F4C082EE24101EA

86

87

88

89

90

91

92

93

94

2018,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validation CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign ECC384 SSL CA G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validated CA - SHA256 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validation CA - SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Organization
Validation CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas ECCR5 OV TLS
CA 2020-12,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 OV TLS CA
2020-12,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CloudSSL CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CloudSSL CA SHA256 - G3,
O = GlobalSign nv-sa,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

74EF335E5E18788307FB9D89CB704BEC112ABD23487DBFF41C4DED5070F241D9

DC6C44AC8A3CD5C3451273F4431526B2EF666062EE763258A928F60BD08E39FE

1E1741A12EB8DA2BD76EA96C04F520359839710F620E80952F48DD0240A12CD8

699D54B7482A5D329331EA0415CC2EDCD60FDA01D19E71D054196BCE0677735C

1C9737E968AD9DFF8D8D7FCF996A144BB97851A19011A0190C943CAE8D43CFE0

2EB8A1317288F08233E6883CEBE67EA6A0989E22ACA42C58D59F5A834E02C513

A6032CC352F1E2E3628E162A3047BC7D647E2D601A2C0F26CAAF9AAF7A54239C

E155EBF96334E79AE2E287D55CFC9185DE24935A653F13C5BA05AFF818771BC6

C2E4236DB1B757B51B77921388EFA823E6A600FD4BDA30B63AB77886F25618B7

95

C = BE
CN = Beame.io CA 1,
O = Beame.io Ltd,C = IL

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

0D36F6A2299E9E268F94ADB49E57E6717D713C3F47B889C40DCDC8CFE940CB80

EV TLS Issuing CA
#
96

97

98

99

100

101

102

103

104

Subject
CN = GlobalSign Atlas E46 EV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R6 EV TLS CA
2022 Q2,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R6 EV TLS CA
2022 Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R6 EV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV TLS CA
H2 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV TLS CA
H2 2021,
O = GlobalSign nv-sa,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
5E2A73EE6069DE65322DCF0430176B385F5238C296EE4392E7ED7DB4BE908A40

398DC562DC098CF75F3A151216E583380C279444B0D63E766D9FDF6F47D04C60

256602DC8A8041B2EDC0CAE611A6A98D9B39AD4DE3E19F62DC0A0A1958B72271

9C9D5E986B5BEA7A1EC8457EBCAA600D2435803B91FEC97C4E5043BE6742D4B1

4CFA14BC7E8F48D4677B0604777AF76AB0C55B326F8B97BA95F6ACE115C05F16

C9A74009DAE194A40BD122ABD015D44E93CB7879B0949054A31042EF4C99E5D6

0ABB1CDE53CCAC170483DAFCD3CDB9F2622BA7E47D31EC0FD3DB271B4AAA530
3

385AA00A1848F807F665561E888B0D4F69614052D825F3C33970E00F4C3658DD

44E683576E1C960D784D17BB2325C25CF1BE4E20470C31D9D73CACED496C95C9

Additional information

105

106

107

108

109

110

111

112

113

114

C = BE
CN = CUISEC GCC R3 TLS EV CA
2021,
O = 联通智慧安全科技有限公司,
C = CN
CN = VTB BANK GCC R6 EV CA 2021,
O = VTB BANK (PJSC),
C = RU
CN = GlobalSign GCC E5 EV QWAC
CA 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Extended Validation
CA - SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign ECC EV SSL CA
2018,
O = GlobalSign nv-sa,
C = BE
CN = Valid Certificadora Digital SSL EV
CA 2018,
O = VALID CERTIFICADORA DIGITAL,C = BR
CN = Soluti CA - EV,
O = SOLUTI - SOLUCOES EM
NEGOCIOS INTELIGENTES S/A,
C = BR
CN = GlobalSign ECC384 EV SSL CA G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R6 EV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV TLS CA
2020,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

9BFABD8D91284500B4D412C5725C87CB3A013F940FF1E62810E6929C69393ED9

52C09A2CA179368703A1857004CD5A3C87D3BDAC3A558E143EF3508FBEEB1032

0DD2C7E0AF8200F49F4192A89AE634D4CE41B80C63B0629CC68E538C316F020E

AED5DD9A5339685DFB029F6D89A14335A96512C3CACC52B2994AF8B6B37FA4D2

8F19FFE02FC795ED70765D1436ADDF772FE0F0773DA436EDBDB42A2E30E2E828

8AEFEBD88BE87A30B19C60C5BD0FB5E9FBCD15D5582D5FC9A7499578D68DCEC0

11FBA4A7EE579C70E1D57F9F9B6A8C209E1219C4F1D3846F83FFCE74E9E5E2CE

15549187490314F5177641F0BEB32634AA1230EB2CF2C28AD9C73914FB18ABA0

BCE7091355D2417A37F8CFE2AC8F17C2748888BA0EEA90000FC980ECFC2D041F

364DF25CC88F6FB0202C02CD9B8EA02DFE8AC02341EFF5A9DFFC5BE159ED5991

Revoked on April 06, 2022

115

116

117

118

119

120

121

122

123

O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV TLS CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 EV QWAC
CA 2022Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 EV QWAC
CA 2022Q2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 EV QWAC
CA 2022Q3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R3 EV QWAC
CA 2022Q4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2022Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2022Q2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2022Q3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2022Q4,
O = GlobalSign nv-sa,
C = BE

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

E1E15D289697AF3285BF34112A3E60BC11C0C8122DD2B9B3420AB2E5E57883CA

F2BC379B1EF45624D8F822B6E359502D470F384E53C082F7AE21869C13A5D345

250AFA50B60D30D1217D00E7DD8CCE6B51F5C0B6A6369324842C37DEB44F9715

9D51DC2750A13BD627D99FDCC720D1904FE81059110BB9DE11B039A4B2ECA531

451FA3A18064B4DD03ADFE8B8BBF16258CB98A1A6FEE5D6B0A37C98A0B5E6DAE

4D81D18D57CDA96440CBFD0FA05CC387B7C69DE3A9E68B4036E1168EE2B7BD21

ED2B6C6F6C669EEC6C158B0FD61E4454185C42842523866F3B3EE9B1F0F62882

0DA5820FDFE4FCF9B9F94C140DB0F06D670D86FCB1BDD9597BCA8731532F353C

4EF99E6A8B14F69938715371B1D853472534CBF595A743CE993E7B386F99B895

124

125

126

127

128

129

130

131

132

133

CN = GlobalSign GCC R3 EV QWAC
CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC E46 EV QWAC
CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV QWAC
CA 2023Q4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV QWAC
CA 2023Q3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV QWAC
CA 2023Q2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R46 EV QWAC
CA 2023Q1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2023Q4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2023Q3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2023Q2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas E46 EV QWAC
CA 2023Q1,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

D4A5941C7141ED1949A0C6CE9DD45A0AB94DC337902EB0A1209852738EEBE854

AA76C50166CD1B865B78D795C2C87A48D4A6229E65F8B38DBD005154EB2ED2DC

B51D85A08FACB06F97FDF58563749003033EE77DD583986204499197CA8E7077

29C840D062AC862DB4D20928D2AEFD83B35A46BD4533995FF2EFD3E3EE8CFFD9

A40C91E466D62CDB32B7139E8748F0EB5A817F6BB8A9F999A7A9BF4306D6D5D5

A7DCFD3D09377C39BA3A7F630E052EC593E9726D1DA57229E599D15AD6DCCA7B

2DA52277662DC1C779E2439FAF58F85F87DBA73E0F16F1B0EB310A4919CFC3BA

430B172A6F7146B16A75BCC5BFA1D60C61DEEAA2ABAC61B4394E4A6B291C48CC

F4C5F3956379493830DE7456E0A55D6FBC1B8EA08B756488FF005B6C394A69C7

F9120A71D50697B9992A7357A0A9A0DDC4BFC3598FCB4F01642964824D3CF276

Revoked on November 17, 2021

134

135

136

O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC E5 UK EVQWAC CA 2021,
O = GMO GlobalSign Ltd,C = GB
CN = GlobalSign GCC R3 UK EVQWAC CA 2020,
O = GMO GlobalSign Ltd,C = GB
CN = GlobalSign GCC E46 UK EVQWAC CA 2020,
O = GMO GlobalSign Ltd,C = GB

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

0966A88729C938F9DCD65BB3C63B608618EAE5183ED1FED752B323089687A20E

A33017D9DF494C09D58709107403AEE461B9461E81BA395C28C36693C27D1986

8814C0688344DE0F21AD1BD076E9F3248AF430E4FE760952E3A150DFAEDCE016

Revoked on November 17, 2021

Other CA
#
137

138

139

140

141

142

143

144

145

146

147

148

Subject
CN = GlobalSign Root E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Root R46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign ECC Root CA - R5
CN = GlobalSign Root R46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Root E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R6
CN = GlobalSign Root R46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign ECC Root CA - R5
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R6
CN = GlobalSign Root E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
O = GlobalSign,
OU = GlobalSign Root CA - R3
CN = GlobalSign,
O = GlobalSign,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
1DF6054D6641404633641BB5FA3742FDA7D075E2514840AB61E00CCBBB7D341D

Additional information
Cross Sign CA

45CB1D874CB03BD5C5B6E079C8FC29E51521EE5628486301964A41F94BA59F88

Cross Sign CA

3F319B2AFED4A0F75127BE59925550D0428E68763A09E273EB6A9FF8D18DBB5B

Cross Sign CA

A63C1398B5F8DD2D432FBE4C2C19142BEA6D5D0221FAE794718AE7597ACCA96D

Cross Sign CA

0F1554C2FD591B0256A608E1C136A837E7A6E041561EE08A911B2AFDCD3C6C1B

Cross Sign CA

DDA8DA736187D76F4F0ED5A5F667B54D99A98AE06091D0E3A01714E9221695AD

Cross Sign CA

A5E33C28E3013A71F5F760AE3B16595090043D2EC5209EC52903C4FBAD258DAD

Cross Sign CA

F349954E8FB6D44011BCB789D97D9A2CB2032BD5F0B598D1FB8A099F5848D523

Cross Sign CA

C84E1378B974A991ACDCDD733421E3061E6FA21A0491C8902BAFDE3855E0063E

Cross Sign CA

33EF151EFB08D1C44FB85CC3F23EC6873014E9F881691BD4938B7F251580B694

Cross Sign CA

445EEC78BC61215044A0379656AA2D5DB5E42F76CB70B8D14C2077AA943D4EBB

Cross Sign CA

C94FEDDA4E8608908580BC7F87B434E03BB262E42F64C63820A8F50FB17C1CEC

Cross Sign CA

149

150

151

152

OU = GlobalSign Root CA - R3
CN = GlobalSign Root CA,
OU = Root CA,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CA for AATL SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CA for AATL SHA384 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GTS Root R1,
O = Google Trust Services LLC,
C = US

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

6ADD368DA35458A09EDF880D0570E863ADC8507D49406B4D97E44E53BC9308C9

Cross Sign CA

AA89C466E9D06882C0DAAF72BE0F0FBCFE7C1EF2AAAD190640C4AD44F5517F34

AC0AB963BB5F3DA05FBC8687F98C2B6EA0BB499E6118C1A9136B1BC7C3C71A6B

3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5

Google Cross-certificate *Timestamp CA
#
153

154

155

156

157

158

159

160

Subject
CN = GlobalSign Partners
Timestamping CA - SHA384 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign TSA CA for AATL,O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA SHA384 - G4,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Partners TSA CA forAATL,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA,
O = GlobalSign,
OU = Timestamping CA
CN = GlobalSign Timestamping CA R3,
O = GlobalSign,
OU = Timestamping CA

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
2A015531A5F3A4CE589BD853C71DD069587322F574D85C9C9B9F9DF8F86C075E

4D8EB49380EC72AC9FDF21FE1C6DB2E9490C76BEADD1F7B528C3CCD272C8FE28

F642418E4D0C63DEC785C960EFA68BA745F38851744EF81F225CB89305314D50

7E8F914119BB1090D6204908E5AE1F40BE24C1491CD7D5CFB6A93618CBC00FD9

C977923C771E1A66C925A2B6F501732E678DC9887AFE6BFAAC039D1D9A71F0EC

9BF9496777D14425ED0086C1BB2C0707B62A61C194C5162E4F07637AFF166B76

D0CAE6947BC77F0B495CA808D6CDE685FCD20225E1E530B635B113ED40728EF3

61C1067083AE044EF1D649CE590BBF09D9D739E025DA8D195F71CFAAD6EBAE69

Additional information

The following CAs are not capable of issuing working publicly trusted SSL/TLS certificates intended to authenticate servers on the Internet (i.e. certificates containing the id-kpserverAuth OID (1.3.6.1.5.5.7.3.1) in the extendedKeyUsage extension) and they were in scope only for the Network Security Requirements:

Root CA#
1

2

Subject
CN = GlobalSign IoT Root R60,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign IoT Root E60,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
36E80B78775DDA9D0BAC964AC29D5A5EC4F3684E0C74445E954A191C2939B8E0

Additional information

43ED443C1F0CD46C9914B4272C24DC42CF6FE62B4AAB37585878A26D882AE4CB

Non-EV Code Signing CA
#
3

4

5

6

7

Subject
CN = GlobalSign GCC R45
CodeSigning CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CodeSigning CA - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CodeSigning CA - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CodeSigning CA SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign CodeSigning CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
74D499A72D0BA5D4DDEC55805ECF157C891E45E5D490A19DC5FD4476954E774B

4047C9D69260C07213BCB8608A7EC5E2838A56B79F67847812EAC0778D0D27F1

FFFE077503FD72F0E5338B0A7B4E218E7D1FF82E493E7E852AE51AA1C7585D17

BE40813869AB27A071D12AD6A8830583EBC3B618E3F2346359F4B11A1C9434EE

FB54EEA9BCE8E9EA9782154F3D414277FB709F49B947D73978AC278546C2CE03

Additional information

EV Code Signing CA
#
8

9

10

Subject
CN = GlobalSign GCC R45 EV
CodeSigning CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Extended Validation
CodeSigning CA - SHA256 - G2,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Extended Validation
CodeSigning CA - SHA256 - G3,
O = GlobalSign nv-sa,
C = BE

Fingerprint SHA-256
CD0E144DD10BAC221FE2FB901058D16450A0578B3C47C770908F2E9ADA28EF12Additional information

1E864278C20881B671C0C6D2E14B61150AD1F13CF92C6EC14B550DCBC47E1541

DD038E87E0B4D2C369680D3DE78638AB39FC1D7E50632996921101768DB8D4D8Other CA
#
11

12

13

14

15

16

Subject
CN = GlobalSign Timestamping Root
E46,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
OU = GlobalSign ECC Root CA - R5,
O = GlobalSign
CN = GlobalSign,
OU = GlobalSign Root CA - R3,
O = GlobalSign
CN = GlobalSign Timestamping RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Secure Mail RootE45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Code Signing RootGlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
24E9A5B561CDFEFEEEB73245DAC1B04465C513F936621D21902DD8A58FD6C461

Additional information
Cross Sign CA

0AED971671F8FE67EBA28817550AFEE946FDC2C52250003A6CFB87BC5AAD8A04

Cross Sign CA

2510E248903F01B63F9398179E5506979F0EF507E4174B657AF6F770A417EC94

Cross Sign CA

6AFBC07C724C6F75C7743392F32BF5780BD5DD39268544D4882E7AEC1ADD0282

Cross Sign CA

5B87841E80AAFE877804E56694473DCA8BB9F1FF4FFCF885A3DAFD24463FCB64

Cross Sign CA

6385DDCD1B768648267EE5122897CA085FC45D6030ECB55098F583AF152AA4A6

Cross Sign CA

17

18

19

20

21

22

23

24

25

R45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign,
OU = GlobalSign Root CA - R6,
O = GlobalSign
CN = GlobalSign Code Signing RootE45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Client Authentication
Root E45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Secure Mail RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Code Signing RootR45,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Client Authentication
Root R45,
O = GlobalSign nv-sa,
C = BE
CN = AbbVie Atlas R45 AATL CA 2022,
O = AbbVie, Inc.,
C = US
CN = Statoil Qualified CA,
O = Statoil ASA - 923609016,
C = NO,
DC = statoil,
DC = com
CN = GlobalSign R45 AATL Root CA
2020,
O = GlobalSign nv-sa,
C = BE

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

75BFB522CC4B58DA22EE488517C5F2EFF92576D20F595F9ACE483A036FC1BB6B

Cross Sign CA

E506B72BB97A14D24959A0D1A977E1ACDB6155D68FB4846885E544D147E7D577

Cross Sign CA

F375270F2F216B9F62CC31795619F6FE1943DF65D1B198D3341170A40725BFC7Cross Sign CA

5268C94573AF66BA5A3DE979F2048DE43BD4B68AF0B73A2D639159FAFE637F69

Cross Sign CA

05E0634B1FEB98AE6B4CF101728CF9D5A1793CEACE301506FF332B22D4CF08EB

Cross Sign CA

3DA135562E942799D547CA72EA57D7AC03791B24D4E24BA2E1E1331E8A1678F0

Cross Sign CA

6FD7EEFF0B14D389FC8115B4FCDF64EED38F29573F0B3969C71BEB0FE55C3F5B

5E297C0107659C8068CC7674635E56F74D05BFD6E687D3075FC48C7E8FF70D95

B296DC3BCF451217D7AD4F84FB8EE25CC92FC659CAFA0EB4A8B5B4DB3D0215C
2

Revoked on March 31, 03

26

27

28

29

30

31

32

33

2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC R45 UK
Qualified Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC E45 UK
Qualified Authentication CA 2020,
O = GMO GlobalSign Ltd,C = GB
CN = EUSPA AR45 SMIME CA 2021,
O = European Union Agency for theSpace Programme (EUSPA),C = CZ
CN = COMESA GCC R45 SMIME CA
2021,
O = Common Market for Eastern andSouthern Africa Secretariat,
C = ZM
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
Authentication CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas E45 Qualified
Authentication CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
Non QSCD Signing CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
QSCD Signing CA 2021,
O = GlobalSign nv-sa,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

F5E9E2705AB0C93E80652D2DEB573AB01D6700597BDA122BC08BA97FDC713368

1DBC5465732AC3232FF12641C2898EA0F239D06186DD1B085496ABC6E5BD07F2

A2F5C0CD7364E1123B21556FB7999BEA8E9F0AEF399A3544CD12EB83C238BA1E

C50DECEFBC246CB07F4FEB282A7633337721F787F8EB68D897F05284FF94FA8A

9BBAB193D19DBA9BA86497C633E89EB421131D29B64129B449832BEC2CC8259F

102DCE6691C0B6DF7CD2521AF88C3546D7582A2CB7DAAD087F9C7DB2AF8351C
5

96B67EB3D828223480405557E3993A3B1781D527294D1978EB0C4ABCC6F40AF2

7A25E3C7B2B3325C5E65D01B9F6FF474ADE4BBCC8CCA3D7F29655352386F36B7

34

35

36

37

38

39

40

41

C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas E45 Qualified
QSCD Signing CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas E45 Qualified
Non QSCD Signing CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC E45 Qualified
Authentication CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = NAESB GCC R45 Client
Authentication CA 2020,
O = GMO GlobalSign Inc.,
C = US
CN = InComm Agent Solutions Inc
Atlas Issuing CA 2020,
O = InComm Agent Solutions Inc,
C = US
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC R45 UK
Qualified Authentication CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC R45 Qualified
Authentication CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R45
PersonalSign 3 CA 2020,
O = GlobalSign nv-sa,
C = BE

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

625597092D6B09F1AB74ECF29F38E0E1C41AF487594B23489A8A604687ACAD99

DBFF9EBA713FF77B60D52B37F35C5AD52D9CD06412F3BAD9128D77D95C7B887
E

5F2155F9A7444615C673994CDA99E963BB558A367B20305520E93D15EF3AF4E8

5EBD04144508FADD1B9DB79FF62B826D6FF893987B1534C0F8EEC2261D6AC452

4DFD9A61EB32208A94F15719FF2EC71449BCB0F344C18D5D1D3994A6C30EC92E

EEE8A6FBDE0B1340552AE739832A686FE96103435AE1FCE9392D655E00D8670D

E042DA36AA8B9A290A525B63AFBBD42E3DBA8286F7100C7981799C6EF2F8919C

50161C1232F32E8057879F9C7651A9088F5AA1EF5AC9A9A4BD445C6E788EA6F8

42

43

44

45

46

47

48

49

2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC E45 UK
Qualified Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC E45 UK
Qualified QSCD Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC E45 Qualified
Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC E45 Qualified
QSCD Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign E45 AATL Root CA
2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign Atlas E45 UK
Qualified Remote Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas E45 Qualified
Remote Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign GCC R45 UK
Qualified QSCD Signing CA 2020,
O = GMO GlobalSign Ltd,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

28CB8EE23E7BDBBF40B2959A57BB589991C2635CD3B71AAB0E84F993C559D29F

712C42F3C0FA3BDFA11B22AC9811C8EB912C4B464B43C705825DEEDC1195AD33

35E9429CDE680D8D5311CDD46FAEF0AEE694B0556C3D69C4F670E243D64C87FE

8115E2CB4F04E56EA70EA932D0622831DD53B22BF6A93B3ACD9125FAB0374AF1

87903E20623512D28BDBFACE4D41BD50F5BA6B1B2E8CCAB134CE161769EAEC00

B89EBBFC57AE60653C676B8EB399DC9415BBB738CB0370651A86BFF075C83A39

5CB0FDEF052BD18A0A40ADA2235F46EB42B6D0993ED5A50DE47E3EA12FF191B1

91F881C556A920B92C4C48221FAAC19615437CF4ACB7D079C0B426BF3483B3AE

50

51

52

53

54

55

56

57

C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC R45 Qualified
Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign GCC R45 Qualified
QSCD Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign Atlas R45 UK
Qualified Remote Signing CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas R45 Qualified
Remote Signing CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R45 AATL CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Atlas R45 AATL CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = European GNSS Agency Atlas
R45 SMIME CA 2021,
O = European GNSS Agency (GSA),C = CZ
CN = GlobalSign Primary SHA256 CA
for Adobe,
OU = GlobalSign CDS,
O = GlobalSign nv-sa,
C = BE

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

4E1474CFEB41D048C7E1E2C975D69AD3FD739BD44577A80D0432F233D51C5C77

1B728D4A76506634A11007912F1D8C6B9AA39BE1AFCA49096657CF1FFB4513BF

0958E7A84F392A4F3B7DC5E30FDC8DF733E69B44C68C16FC0DA1741C08419DA0

323F35F0DFB01D6B478C24026C66852AAD3E96DCB1C5BE17C1DA1EC47D77CC87

BCF8D9040635C95E84F9FEDDF36F9422C0D215C23798E9C2D5F3798ECF27B68A

65573E11BB13C6ED115E0B90E2C30B1E4DE4D5CAC1B31EAB2D417C32A3DA5D79

F4EFE27C6B037747B3A89E23EE23C1B70A24DEB53B2E02F423BB0F73E1822267

8B8AAA67E1EB067303F09E17A505CE7B6CA1C8DC0E1DB59D982B579C69D644E1

58

59

60

61

62

63

64

65

66

67

CN = Statoil Qualified CA,
O = Equinor ASA,
C = NO,
DC = statoil,
DC = com
CN = EY LLP GCC R3 SMIME CA
2020,
O = Ernst Young LLP,C = GB
CN = RWE Atlas R45 SMIME CA 2020,
O = RWE AG,
C = DE
CN = GROB-WERKE GmbH und Co.
KG GCC R3 SMIME CA 2020,
O = GROB-WERKE GmbH und Co.
KG,
C = DE
CN = HERTZ GCC R45 SMIME CA
2020,
O = The HERTZ Corporation,
C = US
CN = GlobalSign Atlas R3 SMIME CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = Accenture Federal Services GCC
R3 Global CA 2020,
O = Accenture Federal Services LLC,
C = US
CN = GlobalSign ECC HV S/MIME CA
1,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Corporate IT Atlas
R45 SMIME CA 2021,
O = GlobalSign nv-sa,
C = BE
CN = CBMM GCC R3 SMIME CA 2020,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

0A665640BE77300E0DF23752F324499E132A99A7E5A81879AA9E58B65F501C97

3A093122808FFFA440E19824D0BC7CD6B01D8D8277F7F42FA16E80A0205D4A7A

BEE8FB99D7B9EC0CAEF1B1A6ACFFEABD777E31CBAC2D0E1846BDAEC4D5B18
BE8B75840FEA15C545335CD4BA58B707F53524CE984655AEBCC248A57E6F2403A8B

013C13426B92F703BA573D9E16C2E35AECA26C60F606B88D3CE2150C94D56C14

479D6A0980722966237F06C41842EE796B55D4D00A0D663B785D48433A29156E

9D61B40ECFE094B415FBF6AEEA1FDB27A1A4C3B6FD9008D768777D6D7FBAAEE
9

E0CE5C4EF5D2186963D2B04ADE4612BBAF787E16048A5B468F7367776C3A03DE

7C4E78C74B4818D17EF8B8AB91E32DB4F7E3CE84A0C5E47AAA62AE39FAB60D01

F6F9C3FC5636C7E800EB1BDDFD33AAF98495C130DBF48F9BAF4AB7A1F665DFB

Revoked on March 31, 03

68

69

70

71

72

73

74

75

76

O = COMPANHIA BRASILEIRA DEMETALURGIA E MINERACAO,
C = BR
CN = DPDHL User CA I5,
O = Deutsche Post AG,
C = DE
CN = GlobalSign Atlas R6 AATL CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = AbbVie Atlas R6 AATL ICA 2020,
O = AbbVie, Inc.,
C = US
CN = Trusted Root nonTLS CASHA256 G3,
O = GlobalSign nv-sa,
C = BE
CN = DSigner GCC R3 SMIME CA
2020,
O = DSIGNER, SOCIEDAD
AN\C3\93NIMA,
C = GT
CN = Hyperion GCC R3 SMIME CA
2020,
O = Hyperion Services Ltd.,C = GB
CN = GlobalSign GCC R3
PersonalSign 2 CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = JCAN Public CA1 - G4,
OU = JCAN Public CA1 - G4,
O = JIPDEC,C = JP
CN = CRB Group GCC R3 SMIME CA
2020,
O = CRB Group, Inc.,
C = US

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

4

163B5F69720164075C16CE760A93C85D5073CD5A0D41C7A3AFB0B5E75B3DC646

96D0E059827A7C99BA5CF586D1B77397A3C83777C467BF1914762AE16ABE3834

6509F94BCA4DC619F3E732D533ACD3D0F10ABA102A13123B6AF737C8E12DAA21

3A30D4A3043F195609E30F747754699CC6CC97E1F5FCB83DE87E659E579E39AD

3FA4A9B65FDF6876FE668DFECC434932EBC254FD741119FC432A5989A085F320

9537738522B6A87FCF8338CF270203CCF1A7770BB14BB23FA2882A05FFB804E4

F0DBB9E90E6643CCB23660147E5DE24760440089D96F4AD0D82F66C3E7DA5C20

9AC4C8E358C095C998122ADD17A336C0AC597ECBECB7EDC3F58A75040CF94A5
F

814179F36A71529C915C540261E44638E37A4FCE879740F0CE7351A8E9291A03

77

78

79

80

81

82

83

84

85

86

CN=Quálitas Compañía de Seguros
S.A. de C.V. GCC R3 CA 2020;
O=Quálitas Compañía de Seguros S.A.
de C.V.; C=MX
CN = GlobalSign GCC R6 AATL CA
2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign GCC R3
PersonalSign 1 CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = Giesecke and Devrient CA,
OU = Corporate CA,
O = Giesecke and Devrient,
L = Munich,
C = DE
CN = FIFCO Atlas R45 SMIME CA
2020,
O = FIFCO,
C = CR
CN = Trafigura PTE Ltd Atlas R45
SMIME CA 2020,
O = Trafigura PTE Ltd,C = SG
CN = Spirit AeroSystems GCC R45
SMIME CA 2020,
O = Spirit AeroSystems, Inc.,
C = US
CN = LinQuest GCC R3 SMIME CA
2020,
O = LinQuest Corporation,
C = US
CN = DexKo Global GCC R3 SMIME
CA 2020,
O = DexKo Global Inc.,
C = US
2.5.4.97 = NTRBE-0459134256,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

795A8468D098E3729E6A17920AA6D8F27E84DC180F85C9B28A77FB368DCC7895

75CC6021036890EAC71853FAE8382CF8DB33DC41706F42AAFE421E98AD38174C

583C7FC250856B7F947FC7CC076FE216273CA1713D122C2E5D8F6038FD6E3562

4AB23AF5233FD65FBD981973515A7379C76B9B852A5B4E35890B7F60D1923A4F

80642AAC7C782BCDB0C3F6F385488F9BE3BB2DE30B863009E74B29F026C9EAE636FCE16CC976727765DF5E9FADB12C544D704C35150D1F17DDE1A42A85B88BE4

90D87E23B012A357851472CE9F4E49201F67BA9EC1FB9CD236C0C5AAA15FFE9E

DDD73ABF0259F18F77CA598C2745EA18243526B10D371D7E3B088D68C88C0A97

D531F24E655D1F28A344BD3E0E9B141CE88A4139C61CB0CF5184EF2E2B9531A7AD304215A70BF5D06E84973BF49862F10CFF490DA9C97D1D6FA6934F8E3C98AF

Revoked on March 31, 03

87

88

89

CN = GlobalSign Atlas R45 Remote
QSCD Delegated RA CA 2022,
O = GlobalSign nv-sa,
C = BE
CN = Ford Motor Company - EnterpriseIssuing CA01,
ST = Michigan,
L = Dearborn,
O = Ford Motor Company,
C = US
CN = InComm Agent Solutions Inc Root
Certificate Authority,
O = InComm Agent Solutions Inc,
ST = Florida,
C = US
CN = Giesecke and Devrient CA,
OU = Corporate CA,
O = Giesecke and Devrient,
L = Munich,
C = DE

7B96DA88C60AE48624F480217865FEB124719022F49E58EE830B3E93D36D9AEF

ECF5DC23556585AE8F9CE5BA0955F982AFF77E975F84C53F4A098626C20BFE5A

A53FB60B6C9CEC1175C729BB8A34D1AA1DA85AF234E41603621D983940026400

Timestamp CA
#
90

91

92

93

Subject
CN = GlobalSign E46 AATLTimeStamping Root CA 2021,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign R45 AATLTimeStamping Root CA 2021,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign Atlas R45 UK
Qualified Timestamping CA 2020,
O = GMO GlobalSign Ltd,C = GB
2.5.4.97 = NTRBE-0459134256,

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Fingerprint SHA-256
2A34A0225DBC82845E8C5F2F13897179A9B2D91E74D93BDE0021F4F89804E59F

3A6224E6EF98D0C4770C229E89CFA346623DF5A250D4B68D04CD5DA4BD85C4C
E

4C03F2D6941F2DFCA27EDC599F385E6CD3FFD0CC842F2CCB95B77580A2D1FF93

D86E6264D58E4CA78AF419740D8186EA8EC48F0C33B4B4D7CA027931D627B1C8Additional information

94

95

96

97

98

99

CN = GlobalSign Atlas R45 Qualified
Timestamping CA 2020,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRGB-04705639,
CN = GlobalSign Atlas ECCR5 UK
Qualified Timestamping CA 2020,
O = GMO GlobalSign Ltd,C = GB
CN = GlobalSign CA for AATL SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
2.5.4.97 = NTRBE-0459134256,
CN = GlobalSign Atlas ECCR5
Qualified Timestamping CA 2020,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Qualified Time
Stamping CA 2019,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA SHA256 - G3,
O = GlobalSign nv-sa,
C = BE
CN = GlobalSign Timestamping CA G3,
O = GlobalSign nv-sa,
C = BE

40382F8827B75D25705A6B3DA32533C5F4218BD7FA697CB0B300E8F47047FBC9

2E8820DC0EAFAE3D6D285C057ECE14470B377438B002CEDD4C72B4F343A54F43

E55A4FE881A4B0433674EC0E5CC261A99CCE3FEF649528C7218085BEDCD11512

74ABE5E5CCEB75491FF72C4CF325405D8ADBFE390E189CF430BA60E62798878E

BE33D1C57EBDDD927B57BDB604BE457B552FE568E7F3DCBA093C39ED1C30A23
9

95C6A747DD0BC755A1941827E894B8083592241B792541E2EB1B30FB9B13F57F* The cross-signed certificate was signed with a key controlled by GlobalSign, and the certificate is subject to GlobalSign’s CP/CPS. While the cross-signing establishes a trusted
relationship, the cross-signed certificate is not controlled by GlobalSign.

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Appendix C – Locations
Location Identifier

CountryState / Province

BE-01

Belgium

Vlaams-Brabant

CN-01

China

Shanghai

IN-01

India

Delhi

JP-01

Japan

Tokyo

JP-02

Japan

Yamaguchi

JP-03

Japan

Tokyo

JP-04

Japan

Tokyo

JP-05

Japan

Tokyo

PH-01

Philippines

National Capital Region

RU-01

RussiaMoscow

SG-01

Singapore

Central Singapore

SG-02

Singapore

Central Singapore

SG-03

Singapore

Central Singapore

UK-01

United Kingdom

Kent

UK-02

United Kingdom

Greater London

UK-03

United Kingdom

Greater London

US-01

United States

New Hampshire

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Appendix D – Publicly disclosed incidents
Bugzilla ID
1649937
1651447
1690807
1707073
1708834
1714968
1744518
1759854
1760311Disclosure
GlobalSign: Incorrect OCSP Delegated Responder
Certificate
GlobalSign: Failure to revoke noncompliant ICA within 7
days
RSA-1024 leaf certificate issued after 2013-12-31
GlobalSign: Invalid countryName
GlobalSign: Invalid stateOrProvinceName and locality
pair
GlobalSign: Incorrect RegNumber-Org Type combination
GlobalSign: EV certificates with serialNumber
Government Entity and businessCategory Private
Organization
GlobalSign: Certificate issued to FQDN with malformed
CAA
GlobalSign: OCSP responder certificates with more than
64 characters in CN

GlobalSign NV/SA
Diestsevest 14, 3000 Leuven Belgium
Main: +32 16 89 19 00 | Fax: +32 16 89 19 09
Web: www.globalsign.com | Email: sales@globalsign.com

Publicly Disclosed Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link
Bugzilla Ticket Link