TCTrust Centre
Our root certificates, revocation lists and trust bundle are published here for anyone to download and verify — signed by the root itself, so nothing on this page needs to be taken on trust.
The current root on its own, DER-encoded. This is the file to pin — compare its fingerprint against the one we gave you separately, never against this page.
Fingerprint (SHA-256) D7:2A:FB:8E:92:59:96:5F:88:29:48:5A:35:FE:EB:80:5F:6C:D2:AD:29:4E:7E:38:EA:BD:40:35:C5:B1:7F:10
Published 2026-10-18 03:00 UTC
Every currently-valid root certificate, PEM-encoded. Import this to trust the platform's certificate chain.
Fingerprint (SHA-256) 60:80:55:E7:C7:36:EA:BC:6D:91:86:BE:E0:FC:4E:A7:32:84:5B:01:2B:CC:81:3C:9F:2C:8F:F3:02:57:A4:4C
Published 2026-10-18 03:00 UTC
The root's current CRL, DER-encoded. Certificates carry this address as their distribution point.
Fingerprint (SHA-256) 20:92:A6:BE:6A:08:17:B8:09:EE:E5:0D:BB:CA:3B:56:51:9D:75:33:30:BF:72:D5:A4:07:EC:06:65:79:EA:FD
Published 2026-10-18 03:00 UTC