What intermediates and roots are Cloudflare-issued certs signed against?

Universal SSL

Universal SSL certificates are issued by Comodo or GlobalSign. The certificates for any given zone are only issued by one of these certificate authorities.

Comodo

SHA-256 ECDSA Certificate Chain

Level Common Name Serial SHA-1 Fingerprint Download
Root AddTrust External CA Root 1 02FAF3E291435468607857694DF5E45B68851868 https://www.crt.sh/?d=1
Intermediate 1 COMODO ECC Certification Authority 4352023FFAA8901F139FE3F4E5C1444E AE223CBF20191B40D7FFB4EA5701B65FDC68A1CA https://www.crt.sh/?d=2818753
Intermediate 2  COMODO ECC Domain Validation Secure Server CA 2 5B25CE6907C4265566D3390C99A954AD 75CFD9BC5CEFA104ECC1082D77E63392CCBA5291 https://www.crt.sh/?d=5097306

 

SHA-256 RSA Certificate Chain

Level Common Name Serial SHA-1 Fingerprint Download
 Root  AddTrust External CA Root 1  02FAF3E291435468607857694DF5E45B68851868 https://www.crt.sh/?d=1
Intermediate 1 COMODO RSA Certification Authority 2766EE56EB49F38EABD770A2FC84DE22 F5AD0BCC1AD56CD150725B1C866C30AD92EF21B0 https://www.crt.sh/?d=1044348
Intermediate 2  COMODO RSA Domain Validation Secure Server CA 2 0BA2D01DCBCB7776E8AC65097AC12541 0BC249478F120F146D5714970A088A3A30C9ED07 https://www.crt.sh/?d=9767399

 

SHA-1 RSA Certificate Chain

Level Common Name Serial SHA-1 Fingerprint Download
Root  AddTrust External CA Root 1  02FAF3E291435468607857694DF5E45B68851868 https://www.crt.sh/?d=1
Intermediate COMODO Domain Validation Legacy Server CA 2 73DB4D987BA078FEBBE6973C24BE0CA9 A46AD6C400249EFBB4F5FC0E8C6E01A1F2256DAF https://www.crt.sh/?d=11814210

 

GlobalSign

SHA-256 RSA Certificate Chain

Level Common Name Serial SHA-1 Fingerprint Download
Root GlobalSign Root CA 040000000001154b5ac394 B1BC968BD4F49D622AA89A81F2150152A41D829C https://www.crt.sh/?d=88
Intermediate GlobalSign CloudSSL CA - SHA256 - G3 46F08CDBCF2C5466EF3301DD5F34 B418B32DB3B8CF9FDFA19CC31216852FCC8286E3 https://www.crt.sh/?d=10152447

 

Dedicated Certificates + SSL for SaaS

Dedicated Certificates and SSL for SaaS certificates are issued by Digicert.

Digicert

SHA-256 ECDSA Certificate Chain

Level Common Name Serial SHA-1 Fingerprint Download
Root Baltimore CyberTrust Root 33554617 D4DE20D05E66FC53FE1A50882C78DB2852CAE474 https://www.crt.sh/?d=76
Intermediate CloudFlare Inc ECC CA-2 0FF3E61639AA3D1A1265F41F8B34E5B6 6B53C3B358CEF368201F8741B9C5AEDEEA3861FA https://www.crt.sh/?d=12715854

 

SHA-256 RSA Certificate Chain

Level Common Name Serial SHA-1 Fingerprint Download
Root Baltimore CyberTrust Root 33554617 D4DE20D05E66FC53FE1A50882C78DB2852CAE474 https://www.crt.sh/?d=76
Intermediate CloudFlare Inc RSA CA-1 060DD6C1D067901B5475FCFFC29E3137 2AA2B8A223DA08798599B54DE4121757ABA33341 https://www.crt.sh/?d=12716191

 

SHA-1 RSA Certificate Chain

Level Common Name Serial SHA-1 Fingerprint Download
Root GTE CyberTrust Global Root 421 97817950D81C9670CC34D809CF794431367EF474 https://www.crt.sh/?d=10
Intermediate CloudFlare Inc Compatibility CA-3 0E9D4DA2F4273B048AB6A23D2D67210E CD33EF99FD9BDBD5FA550B4F07471C7D8D1627BF https://www.crt.sh/?d=49681420
Still not finding what you need?

The Cloudflare team is here to help. 95% of questions can be answered using the search tool, but if you can’t find what you need, submit a support request.

Powered by Zendesk