PKI Tutorials - Herong's Tutorial Examples - v2.32, by Herong Yang
Listing of Trusted Root CA in IE
This section provides a tutorial example on how to see the list of trusted root CA (Certificate Authorities) pre-installed in IE.
As learned earlier, the trust of the entire HTTPS Website PKI is based on certificates of trusted root CA (Certificate Authorities) pre-installed in the browser.
Before using the Microsoft browser IE on my computer to visit any HTTPS Websites, I want to see who are those trusted root CAs pre-installed in IE.
1. Run IE and click the "Tools (or Alt-X)" > "Internet Options" menu. The Internet Options dialog box shows up.
2. Click the "Content" tab and the "Certificates" button. The Certificates dialog box shows up.
3. Click the "Trusted Root Certification Authorities" tab. A list of about 65 pre-installed trusted root CA certificates shows up.
Expiration Root CA 2020-05-30 AddTrust External CA Root 2025-05-12 Baltimore CyberTrust Root 2005-01-05 CAEAST.CMGI.COM 2003-11-20 CAEAST.CMGI.COM 2005-01-05 CAEAST.CMGI.COM 2003-11-20 CAEAST.CMGI.COM 2027-06-11 Certum CA 2029-12-31 Certum Trusted Network CA 2019-07-06 Class 2 Primary CA 2028-08-01 Class 3 Public Primary Certification Authority 2038-01-18 COMODO RSA Certification Authority 2028-05-08 COMODO RSA Code Signing CA 1999-12-30 Copyright (c) 1997 Microsoft Corp. 2031-11-09 DigiCert Assured ID Root CA 2031-11-09 DigiCert Global Root CA 2038-01-15 DigiCert Global Root G2 2031-11-09 DigiCert High Assurance EV Root CA 2021-09-30 DST Root CA X3 2029-11-05 D-TRUST Root Class 3 CA 2 2009 2026-11-27 Entrust Root Certification Authority 2030-12-07 Entrust Root Certification Authority - G2 2029-07-24 Entrust.net Certification Authority (2048) 2018-08-22 Equifax Secure Certificate Authority 2022-05-21 GeoTrust Global CA 2036-07-16 GeoTrust Primary Certification Authority 2038-01-18 GeoTrust Primary Certification Authority - G2 2037-12-01 GeoTrust Primary Certification Authority - G3 2022-08-08 Global Enterprise CA 2015-11-17 Global Enterprise CA 2027-09-19 Global Enterprise CA 2029-03-18 GlobalSign 2021-12-15 GlobalSign 2028-01-28 GlobalSign Root CA 2034-06-29 Go Daddy Class 2 Certification Authority 2037-12-31 Go Daddy Root Certificate Authority - G2 2031-08-03 GPKIRootCA1 2018-08-13 GTE CyberTrust Global Root 1999-12-31 Microsoft Authenticode(tm) Root Authority 2020-12-31 Microsoft Root Authority 2021-05-09 Microsoft Root Certificate Authority 2035-06-23 Microsoft Root Certificate Authority 2010 2036-03-22 Microsoft Root Certificate Authority 2011 2004-01-07 NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc. 2031-11-24 QuoVadis Root CA 2 2042-01-12 QuoVadis Root CA 2 G3 2021-03-17 QuoVadis Root Certification Authority 2029-12-31 SecureTrust CA 2023-09-30 Security Communication RootCA1 2034-06-29 Starfield Class 2 Certification Authority 2037-12-31 Starfield Root Certificate Authority - G2 2036-09-17 StartCom Certification Authority 2020-12-31 Thawte Premium Server CA 2036-07-16 thawte Primary Root CA 2037-12-01 thawte Primary Root CA - G3 2020-12-31 Thawte Timestamping CA 2030-12-31 TWCA Root Certification Authority 2030-12-31 TWCA Root Certification Authority 2019-07-09 UTN-USERFirst-Hardware 2019-07-09 UTN-USERFirst-Object 2020-02-07 VeriSign Class 3 Code Signing 2010 CA 2036-07-16 VeriSign Class 3 Public Primary Certification Authority - G3 2036-07-16 VeriSign Class 3 Public Primary Certification Authority - G5 2028-08-01 VeriSign Trust Network 2037-12-01 VeriSign Universal Root Certification Authority 2037-12-01 VeriSign Universal Root Certification Authority
But in back in 2015, my IE 10 included about 400 pre-installed trusted root CA certificates. I don't know why IE removed so many of them.
Trusted Root CA Certificate Expiration AAA Certificate Services 12/31/28 ABA.ECOM Root CA 07/09/09 AC Raiz Certicamara S.A. 04/02/30 AC1 RAIZ MTIN 11/03/19 ACCVRAIZ1 12/31/30 ACEDICOM Root 04/13/28 ACNLB 05/15/23 Actalis Authentication CA G1 06/25/22 AddTrust External CA Root 05/30/20 AdminCA-CD-T01 01/25/16 Admin-Root-CA 11/10/21 ADOCA02 01/26/19 AffirmTrust Commercial 12/31/30 Agence Nationale de Certification Electronique 08/12/37 Alibaba.com Corporation Root CA 02/19/16 America Online Root Certification Authority 1 11/19/37 ANCERT Certificados CGN 02/11/24 ANF Server CA 11/30/21 Application CA G2 03/31/16 Arge Daten Oesterreichische Gesellschaft fuer Datenschutz 02/12/09 ATHEX Root CA 10/17/30 Atos TrustedRoot 2011 12/31/30 Autoridad Certificadora Raiz de la Secretaria de Economia 05/08/25 Baltimore CyberTrust Root 05/12/25 Buypass Class 2 CA 1 10/13/16 CA DATEV BT 01 01/09/17 CA Disig 03/21/16 CCA India 2007 07/04/15 Certeurope Root CA 2 03/27/37 CERTICAMARA S.A. 02/23/15 Certificado de la Clave Principal 04/27/12 Certigna 06/29/27 Certinomis - Autorite Racine 09/17/28 Certipost E-Trust Primary Normalised CA 07/26/20 Certisign - Autoridade Certificadora - AC2 06/26/18 certSIGN ROOT CA 07/04/31 Certum CA 06/11/27 CESAM 01/30/19 CFCA EV ROOT 12/30/29 Chambers of Commerce Root 09/30/37 China Internet Network Information Center EV... 08/31/30 Cisco Root CA 2048 05/14/29 (VeriSign) Class 1 Primary CA 07/06/20 CNNIC ROOT 04/16/27 Common Policy 10/15/27 COMODO Certification Authority 12/31/30 ComSign Advanced Security CA 03/24/29 Correo Uruguayo - Root CA 12/30/30 Cybertrust Global Root 12/15/21 Deutsche Telekom Root CA 2 07/09/19 DigiCert Assured ID Root CA 11/09/31 Digidentity L3 Root CA - G2 11/10/31 DST (ANX Network) CA 12/09/18 DSTCA E1 12/10/18 DST-Entrust GTI CA 12/08/18 EBG Elektronik Sertifika Hizmet Saglayicisi 08/13/16 EC-ACC 01/07/31 E-CERT ROOT CA 09/05/28 Echoworx Root CA2 10/07/30 ECRaizEstado 06/23/30 EE Certification Centre Root CA 12/17/30 e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi 01/04/17 E-ME SSI (RCA) 05/19/27 Entrust Root Certification Authority 11/27/26 ePKI Root Certification Authority 12/19/34 Equifax Secure Certificate Authority 08/22/18 E-Tugra Certification Authority 03/03/23 Federal Common Policy CA 12/01/30 FNMT Clase 2 CA 03/18/19 GeoTrust Global CA 05/20/22 Global Chambersign Root 09/30/37 GlobalSign 03/18/29 GLOBALTRUST 09/18/36 Go Daddy Class 2 Certification Authority 06/29/34 Government Root Certification Authority 12/05/32 GPKIRootCA 03/15/17 GTE CyberTrust Global Root 08/13/18 Halcom CA FO 06/05/20 Hellenic Academic and Research Institutions RootCA 2011 12/01/31 Hongkong Post Root CA 01/16/10 http://www.valicert.com/ 06/25/19 I.CA - Qualified Certification Authority, 09/2009 08/31/19 IGC/A 10/17/20 InfoNotary CSP Root 03/06/26 IPS SERVIDORES 12/29/09 ipsCA Global CA Root 12/25/29 Izenpe.com 01/30/18 Izenpe.com 12/13/37 Juur-SK 08/26/16 KEYNECTIS ROOT CA 05/25/20 KISA RootCA 1 08/24/25 LAWtrust Root Certification Authority 2048 05/16/32 LuxTrust Global Root 03/17/21 Microsec e-Szigno Root CA 04/06/17 Microsoft Authenticode(tm) Root Authority 12/31/99 Network Solutions Certificate Authority 12/31/30 OATI WebCARES Root CA 06/03/38 OISTE WISeKey Global Root GA CA 12/11/37 PersonalID Trustworthy RootCA 2011 09/01/41 Post.Trust Root CA 07/05/22 Posta CA Root 10/20/28 POSTArCA 02/07/23 PostSignum Root QCA 2 01/19/25 Public Notary Root 09/30/37 QuoVadis Root CA 1 G3 01/12/42 Registradores de Espana - CA Raiz 01/09/31 (MOPAS) Root CA 12/23/14 Root CA Generalitat Valenciana 07/01/21 ROOTCA, OSCCA, CN 08/23/25 RSA Security 2048 V3 02/22/26 Secure Global CA 12/31/29 SecureNet CA Class B 10/16/09 SecureSign RootCA1 09/15/20 SecureTrust CA 12/31/29 Security Communication EV RootCA1 06/05/37 Serasa Certificate Authority I 11/21/24 SG TRUST SERVICES RACINE 09/05/30 sigen-ca 06/29/21 Signet Root CA 05/06/38 sigov-ca 01/10/21 SITHS CA v3 11/28/15 SITHS Root CA v1 03/29/32 Sonera Class1 CA 04/06/21 SSC Root CA A 12/28/26 Staat der Nederlanden Root CA 12/16/15 Starfield Class 2 Certification Authority 06/29/34 StartCom Certification Authority 09/17/36 S-TRUST Authentication and Encryption Root CA 2005:PN 06/21/30 Swedish Government Root Authority v1 04/14/30 Swiss Government Root CA I 02/15/35 Swisscom Root CA 1 08/18/25 SwissSign Gold CA - G2 10/25/36 Symantec Class 1 Public Primary Certification Authority - G4 01/18/38 SZAFIR ROOT CA 12/06/31 TDC Internet Root CA 04/05/21 TDC OCES CA 02/11/37 TeliaSonera Root CA v1 10/18/32 Thawte Personal Basic CA 12/31/20 TM Applied Business Root Certificate 10/10/31 TRUST2408 OCES Primary CA 12/03/37 Trustis EVS Root CA 01/09/27 T-TeleSec GlobalRoot Class 2 10/01/33 TUKTRUST Elektronik Islem Hizmetleri 09/16/15 TWCA Root Certification Authority 12/31/30 UCA Global Root 12/30/37 UCA Root 12/30/29 USERTrust ECC Certification Authority 01/18/38 UTN - DATACorp SGC 06/24/19 UTN-USERFirst-Client Authentication and Email 07/09/19 VAS Latvijas Pasts SSI(RCA) 09/13/24 VeriSign Class 1 Public Primary Certification Authority - G3 07/16/36 Verizon Global Root CA 07/30/34 VI Registru Centras RCSC (RootCA) 07/21/24 Visa eCommerce Root 06/23/22 VRK Gov. Root CA 12/18/23 WellsSecure Public Root Certificate Authority 12/13/22 XRamp Global Certification Authority 01/01/35
Table of Contents
Introduction of PKI (Public Key Infrastructure)
Introduction of HTTPS (Hypertext Transfer Protocol Secure)
Using HTTPS with Google Chrome
Using HTTPS with Mozilla Firefox
►HTTPS with IE (Internet Explorer)
Visiting "https" Website with IE
Viewing Server Certificate Details in IE
Viewing Server Certificate Path in IE
Installing Server Certificate Permanently in IE
Viewing Certificates in Certificate Stores in IE
►Listing of Trusted Root CA in IE
Exporting Certificate to File from IE
Saving Server Certificate to File with IE
IE Supporting Multiple Certificate Paths
IE Reinstalling Root Certificates Automatically
Windows Automatic Root Update Mechanism
Android and Server Certificate
Windows Certificate Stores and Console
RDP (Remote Desktop Protocol) and Server Certificate
macOS Certificate Stores and Keychain Access
Perl Scripts Communicating with HTTPS Servers
PHP Scripts Communicating with HTTPS Servers
Java Programs Communicating with HTTPS Servers
.NET Programs Communicating with HTTPS Servers
CAcert.org - Root CA Offering Free Certificates
PKI CA Administration - Issuing Certificates
Comodo Free Personal Certificate
Digital Signature - Microsoft Word
Digital Signature - OpenOffice.org 3