Roots and certificates

Every root certificate owned by the OISTE Foundation, with its SHA-256 fingerprint, validity and revocation list. Check the fingerprint before you install or trust a root.

Fingerprints from the OISTE GitHub repository (CAHIERARCHIES.md)

Relying party agreementBefore relying on an OISTE root certificate or CRL you must accept the OISTE Relying Party Agreement and read the current CP/CPS.

Current generation

G1 roots

Four roots, separated by purpose and algorithm. Included in Mozilla’s root store (Firefox 145, NSS 3.117).

Post-quantum

Quantum Root Key

Previous generation

Global Root GA, GB and GC

Still valid until the dates shown.

SHA-256 fingerprints as published in the OISTE CA hierarchies document.

Full CA hierarchies, including subordinate CAs, on GitHub