Listing of Trusted Root CA in Google Chrome

PKI Tutorials - Herong's Tutorial Examples

∟Listing of Trusted Root CA in Google Chrome

This section provides a tutorial example on how to see the list of trusted root CA (PKI Authorities) pre-installed in Google Chrome.

As we learned earlier, the trust of the entire HTTPS Website is based on certificates of trusted root CA (PKI authorities).

Before using the Google browser Google Chrome on my computer to visit any HTTPS Websites, I want to see who are those trusted PKI authorities.

1. Run Google Chrome, and go to the "Settings" after click the menu icon on top right corner. You see the settings page showing up.

2. Click the "Show advanced settings..." link at the bottom.

3. Click the "Manage certificates..." button in the HTTPS/SSL section. You see Certificates manager showing up.

4. Click the "Trusted Root Certificate Authorities" tab. A list of about 65 pre-installed trusted root CA certificates shows up.

If you compare the list of trusted root CA in Google Chrome and IE (Internet Explorer), you will see that they are the same. My guess is that Google Chrome is sharing certificate stores with IE.

Expiration   Root CA

2020-05-30   AddTrust External CA Root
2025-05-12   Baltimore CyberTrust Root
2005-01-05   CAEAST.CMGI.COM
2003-11-20   CAEAST.CMGI.COM
2005-01-05   CAEAST.CMGI.COM
2003-11-20   CAEAST.CMGI.COM
2027-06-11   Certum CA
2029-12-31   Certum Trusted Network CA
2019-07-06   Class 2 Primary CA
2028-08-01   Class 3 Public Primary Certification Authority
2038-01-18   COMODO RSA Certification Authority
2028-05-08   COMODO RSA Code Signing CA
1999-12-30   Copyright (c) 1997 Microsoft Corp.
2031-11-09   DigiCert Assured ID Root CA
2031-11-09   DigiCert Global Root CA
2038-01-15   DigiCert Global Root G2
...