TCTrust Centre
Our root certificates, revocation lists and trust bundle are published here for anyone to download and verify — signed by the root itself, so nothing on this page needs to be taken on trust.
The current root on its own, DER-encoded. This is the file to pin — compare its fingerprint against the one we gave you separately, never against this page.
Fingerprint (SHA-256) 7D:97:EE:C4:E4:FD:51:83:B0:99:7C:19:CB:38:2E:2D:F4:80:4F:A7:3B:3F:64:D1:7F:47:13:B0:65:45:31:6C
Published 2026-09-08 14:06 UTC
Every currently-valid root certificate, PEM-encoded. Import this to trust the platform's certificate chain.
Fingerprint (SHA-256) B1:3C:5F:45:4F:C5:6E:1F:31:EA:91:EC:B0:3A:D9:54:D7:80:01:E3:A3:6F:87:44:D9:59:0C:5F:90:B1:FC:54
Published 2026-09-08 14:06 UTC
The root's current CRL, DER-encoded. Certificates carry this address as their distribution point.
Fingerprint (SHA-256) 3B:A4:FC:56:B8:70:16:7C:F3:22:5D:15:C6:DB:EA:7A:A2:0C:91:41:D9:5A:D9:00:57:92:03:9A:D6:2B:22:41
Published 2026-09-08 14:06 UTC