22title : 证书信任链
33linkTitle : 证书信任链(根证书和中间证书)
44slug : certificates
5- lastmod : 2025-09-25
5+ lastmod : 2025-11-20
66show_lastmod : 1
77---
88
@@ -31,7 +31,7 @@ show_lastmod: 1
3131 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=183269 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=183269 )
3232 * 证书详细信息(自签名版本):[ crt.sh] ( https://crt.sh/?id=3335562555 ) 、[ der] ( /certs/isrg-root-x2.der ) 、[ pem] ( /certs/isrg-root-x2.pem ) 、[ txt] ( /certs/isrg-root-x2.txt )
3333 * 证书详细信息(ISRG Root X1 交叉签名的版本):[ crt.sh] ( https://crt.sh/?id=3334561878 ) 、[ der] ( /certs/isrg-root-x2-cross-signed.der ) 、[ pem] ( /certs/isrg-root-x2-cross-signed.pem ) 、[ txt] ( /certs/isrg-root-x2-cross-signed.txt )
34- * 证书详细信息(ISRG Root X1 第二次交叉签名的版本):[ der] ( /certs/gen-y/root-x2-by-x1.der ) 、[ pem] ( /certs/gen-y/root-x2-by-x1.pem ) 、[ txt] ( /certs/gen-y/root-x2-by-x1.txt )
34+ * 证书详细信息(ISRG Root X1 第二次交叉签名的版本):[ crt.sh ] ( https://crt.sh/?id=20878422868 ) 、 [ der] ( /certs/gen-y/root-x2-by-x1.der ) 、[ pem] ( /certs/gen-y/root-x2-by-x1.pem ) 、[ txt] ( /certs/gen-y/root-x2-by-x1.txt )
3535 * 测试网站:[ 正常证书] ( https://valid-isrgrootx2.letsencrypt.org/ ) 、[ 已吊销证书] ( https://revoked-isrgrootx2.letsencrypt.org/ ) 、[ 已过期证书] ( https://expired-isrgrootx2.letsencrypt.org/ )
3636
3737下列根证书尚未加入各类可信证书库,但近期将进入申请阶段:
@@ -40,13 +40,15 @@ show_lastmod: 1
4040 * 主体:` O = ISRG, CN = Root YE `
4141 * 密钥类型:` ECDSA P-384 `
4242 * 有效期限:暂无(2025-09-03 生成)
43+ * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=430535 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=430535 )
4344 * 证书详细信息(自签名版本):[ der] ( /certs/gen-y/root-ye.der ) 、[ pem] ( /certs/gen-y/root-ye.pem ) 、[ txt] ( /certs/gen-y/root-ye.txt )
4445 * 证书详细信息(ISRG Root X2 交叉签名的版本):[ der] ( /certs/gen-y/root-ye-by-x2.der ) 、[ pem] ( /certs/gen-y/root-ye-by-x2.pem ) 、[ txt] ( /certs/gen-y/root-ye-by-x2.txt )
4546 * 测试网站:即将上线
4647* ** ISRG Root YR**
4748 * 主体:` O = ISRG, CN = Root YR `
4849 * 密钥类型:` RSA 4096 `
4950 * 有效期限:暂无(2025-09-03 生成)
51+ * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=430543 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=430543 )
5052 * 证书详细信息(自签名版本):[ der] ( /certs/gen-y/root-yr.der ) 、[ pem] ( /certs/gen-y/root-yr.pem ) 、[ txt] ( /certs/gen-y/root-yr.txt )
5153 * 证书详细信息(ISRG Root X1 交叉签名的版本):[ der] ( /certs/gen-y/root-yr-by-x1.der ) 、[ pem] ( /certs/gen-y/root-yr-by-x1.pem ) 、[ txt] ( /certs/gen-y/root-yr-by-x1.txt )
5254 * 测试网站:即将上线
@@ -64,27 +66,27 @@ show_lastmod: 1
6466 * 密钥类型:` ECDSA P-384 `
6567 * 有效期至:2027-03-12
6668 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295813 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295813 )
67- * 证书详细信息(ISRG Root X2 签名的版本):[ der] ( /certs/2024/e7.der ) 、[ pem] ( /certs/2024/e7.pem ) 、[ txt] ( /certs/2024/e7.txt )
68- * 证书详细信息(ISRG Root X1 交叉签名的版本):[ der] ( /certs/2024/e7-cross.der ) 、[ pem] ( /certs/2024/e7-cross.pem ) 、[ txt] ( /certs/2024/e7-cross.txt )
69+ * 证书详细信息(ISRG Root X2 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132900 ) 、 [ der] ( /certs/2024/e7.der ) 、[ pem] ( /certs/2024/e7.pem ) 、[ txt] ( /certs/2024/e7.txt )
70+ * 证书详细信息(ISRG Root X1 交叉签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132895 ) 、 [ der] ( /certs/2024/e7-cross.der ) 、[ pem] ( /certs/2024/e7-cross.pem ) 、[ txt] ( /certs/2024/e7-cross.txt )
6971* ** Let's Encrypt E8**
7072 * 主体:` O = Let's Encrypt, CN = E8 `
7173 * 密钥类型:` ECDSA P-384 `
7274 * 有效期至:2027-03-12
7375 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295809 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295809 )
74- * 证书详细信息(ISRG Root X2 签名的版本):[ der] ( /certs/2024/e8.der ) 、[ pem] ( /certs/2024/e8.pem ) 、[ txt] ( /certs/2024/e8.txt )
75- * 证书详细信息(ISRG Root X1 交叉签名的版本):[ der] ( /certs/2024/e8-cross.der ) 、[ pem] ( /certs/2024/e8-cross.pem ) 、[ txt] ( /certs/2024/e8-cross.txt )
76+ * 证书详细信息(ISRG Root X2 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132890 ) 、 [ der] ( /certs/2024/e8.der ) 、[ pem] ( /certs/2024/e8.pem ) 、[ txt] ( /certs/2024/e8.txt )
77+ * 证书详细信息(ISRG Root X1 交叉签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132901 ) 、 [ der] ( /certs/2024/e8-cross.der ) 、[ pem] ( /certs/2024/e8-cross.pem ) 、[ txt] ( /certs/2024/e8-cross.txt )
7678* ** Let's Encrypt R12**
7779 * 主体:` O = Let's Encrypt, CN = R12 `
7880 * 密钥类型:` RSA 2048 `
7981 * 有效期至:2027-03-12
8082 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295816 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295816 )
81- * 证书详细信息(ISRG Root X1 签名的版本):[ der] ( /certs/2024/r12.der ) 、[ pem] ( /certs/2024/r12.pem ) 、[ txt] ( /certs/2024/r12.txt )
83+ * 证书详细信息(ISRG Root X1 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132898 ) 、 [ der] ( /certs/2024/r12.der ) 、[ pem] ( /certs/2024/r12.pem ) 、[ txt] ( /certs/2024/r12.txt )
8284* ** Let's Encrypt R13**
8385 * 主体:` O = Let's Encrypt, CN = R13 `
8486 * 密钥类型:` RSA 2048 `
8587 * 有效期至:2027-03-12
8688 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295817 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295817 )
87- * 证书详细信息(ISRG Root X1 签名的版本):[ der] ( /certs/2024/r13.der ) 、[ pem] ( /certs/2024/r13.pem ) 、[ txt] ( /certs/2024/r13.txt )
89+ * 证书详细信息(ISRG Root X1 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132902 ) 、 [ der] ( /certs/2024/r13.der ) 、[ pem] ( /certs/2024/r13.pem ) 、[ txt] ( /certs/2024/r13.txt )
8890
8991点击下方展开目前未用于常规签发流程的其他中间证书:
9092
@@ -98,14 +100,14 @@ show_lastmod: 1
98100 * 密钥类型:` ECDSA P-384 `
99101 * 有效期至:2027-03-12
100102 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295812 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295812 )
101- * 证书详细信息(ISRG Root X2 签名的版本):[ der] ( /certs/2024/e9.der ) 、[ pem] ( /certs/2024/e9.pem ) 、[ txt] ( /certs/2024/e9.txt )
102- * 证书详细信息(ISRG Root X1 交叉签名的版本):[ der] ( /certs/2024/e9-cross.der ) 、[ pem] ( /certs/2024/e9-cross.pem ) 、[ txt] ( /certs/2024/e9-cross.txt )
103+ * 证书详细信息(ISRG Root X2 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132894 ) 、 [ der] ( /certs/2024/e9.der ) 、[ pem] ( /certs/2024/e9.pem ) 、[ txt] ( /certs/2024/e9.txt )
104+ * 证书详细信息(ISRG Root X1 交叉签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132894 ) 、 [ der] ( /certs/2024/e9-cross.der ) 、[ pem] ( /certs/2024/e9-cross.pem ) 、[ txt] ( /certs/2024/e9-cross.txt )
103105* ** Let's Encrypt R14**
104106 * 主体:` O = Let's Encrypt, CN = R14 `
105107 * 密钥类型:` RSA 2048 `
106108 * 有效期至:2027-03-12
107109 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295818 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295818 )
108- * 证书详细信息(ISRG Root X1 签名的版本):[ der] ( /certs/2024/r14.der ) 、[ pem] ( /certs/2024/r14.pem ) 、[ txt] ( /certs/2024/r14.txt )
110+ * 证书详细信息(ISRG Root X1 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132903 ) 、 [ der] ( /certs/2024/r14.der ) 、[ pem] ( /certs/2024/r14.pem ) 、[ txt] ( /certs/2024/r14.txt )
109111
110112</details >
111113
@@ -118,31 +120,37 @@ show_lastmod: 1
118120 * 主体:` O = Let's Encrypt, CN = YE1 `
119121 * 密钥类型:` ECDSA P-384 `
120122 * 有效期至:2028-09-02
123+ * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=432952 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=432952 )
121124 * 证书详细信息:[ der] ( /certs/gen-y/int-ye1.der ) 、[ pem] ( /certs/gen-y/int-ye1.pem ) 、[ txt] ( /certs/gen-y/int-ye1.txt )
122125* ** Let's Encrypt YE2**
123126 * 主体:` O = Let's Encrypt, CN = YE2 `
124127 * 密钥类型:` ECDSA P-384 `
125128 * 有效期至:2028-09-02
129+ * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=431054 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=431054 )
126130 * 证书详细信息:[ der] ( /certs/gen-y/int-ye2.der ) 、[ pem] ( /certs/gen-y/int-ye2.pem ) 、[ txt] ( /certs/gen-y/int-ye2.txt )
127131* ** Let's Encrypt YE3**
128132 * 主体:` O = Let's Encrypt, CN = YE3 `
129133 * 密钥类型:` ECDSA P-384 `
130134 * 有效期至:2028-09-02
135+ * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=432914 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=432914 )
131136 * 证书详细信息:[ der] ( /certs/gen-y/int-ye3.der ) 、[ pem] ( /certs/gen-y/int-ye3.pem ) 、[ txt] ( /certs/gen-y/int-ye3.txt )
132137* ** Let's Encrypt YR1**
133138 * 主体:` O = Let's Encrypt, CN = YR1 `
134139 * 密钥类型:` RSA 2048 `
135140 * 有效期至:2028-09-02
141+ * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=432476 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=432476 )
136142 * 证书详细信息:[ der] ( /certs/gen-y/int-yr1.der ) 、[ pem] ( /certs/gen-y/int-yr1.pem ) 、[ txt] ( /certs/gen-y/int-yr1.txt )
137143* ** Let's Encrypt YR2**
138144 * 主体:` O = Let's Encrypt, CN = YR2 `
139145 * 密钥类型:` RSA 2048 `
140146 * 有效期至:2028-09-02
147+ * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=432477 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=432477 )
141148 * 证书详细信息:[ der] ( /certs/gen-y/int-yr2.der ) 、[ pem] ( /certs/gen-y/int-yr2.pem ) 、[ txt] ( /certs/gen-y/int-yr2.txt )
142149* ** Let's Encrypt YR3**
143150 * 主体:` O = Let's Encrypt, CN = YR3 `
144151 * 密钥类型:` RSA 2048 `
145152 * 有效期至:2028-09-02
153+ * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=432480 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=432480 )
146154 * 证书详细信息:[ der] ( /certs/gen-y/int-yr3.der ) 、[ pem] ( /certs/gen-y/int-yr3.pem ) 、[ txt] ( /certs/gen-y/int-yr3.txt )
147155
148156</details >
@@ -155,40 +163,40 @@ show_lastmod: 1
155163* ** Let's Encrypt E1**
156164 * 主体:` O = Let's Encrypt, CN = E1 `
157165 * 密钥类型:` ECDSA P-384 `
158- * 有效期至:2025-09-15
166+ * 有效期至:2025-09-15(已过期)
159167 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=183283 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=183283 )
160168 * 证书详细信息(ISRG Root X2 签名的版本):[ crt.sh] ( https://crt.sh/?id=3334671964 ) 、[ der] ( /certs/lets-encrypt-e1.der ) 、[ pem] ( /certs/lets-encrypt-e1.pem ) 、[ txt] ( /certs/lets-encrypt-e1.txt )
161169* ** Let's Encrypt E2**
162170 * 主体:` O = Let's Encrypt, CN = E2 `
163171 * 密钥类型:` ECDSA P-384 `
164- * 有效期至:2025-09-15
172+ * 有效期至:2025-09-15(已过期)
165173 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=183284 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=183284 )
166174 * 证书详细信息(ISRG Root X2 签名的版本):[ crt.sh] ( https://crt.sh/?id=3334671963 ) 、[ der] ( /certs/lets-encrypt-e2.der ) 、[ pem] ( /certs/lets-encrypt-e2.pem ) 、[ txt] ( /certs/lets-encrypt-e2.txt )
167175* ** Let's Encrypt E5**
168176 * 主体:` O = Let's Encrypt, CN = E5 `
169177 * 密钥类型:` ECDSA P-384 `
170178 * 有效期至:2027-03-12
171179 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295810 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295810 )
172- * 证书详细信息(ISRG Root X2 签名的版本):[ der] ( /certs/2024/e5.der ) 、[ pem] ( /certs/2024/e5.pem ) 、[ txt] ( /certs/2024/e5.txt )
173- * 证书详细信息(ISRG Root X1 交叉签名的版本):[ der] ( /certs/2024/e5-cross.der ) 、[ pem] ( /certs/2024/e5-cross.pem ) 、[ txt] ( /certs/2024/e5-cross.txt )
180+ * 证书详细信息(ISRG Root X2 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132891 ) 、 [ der] ( /certs/2024/e5.der ) 、[ pem] ( /certs/2024/e5.pem ) 、[ txt] ( /certs/2024/e5.txt )
181+ * 证书详细信息(ISRG Root X1 交叉签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132892 ) 、 [ der] ( /certs/2024/e5-cross.der ) 、[ pem] ( /certs/2024/e5-cross.pem ) 、[ txt] ( /certs/2024/e5-cross.txt )
174182* ** Let's Encrypt E6**
175183 * 主体:` O = Let's Encrypt, CN = E6 `
176184 * 密钥类型:` ECDSA P-384 `
177185 * 有效期至:2027-03-12
178186 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295819 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295819 )
179- * 证书详细信息(ISRG Root X2 签名的版本):[ der] ( /certs/2024/e6.der ) 、[ pem] ( /certs/2024/e6.pem ) 、[ txt] ( /certs/2024/e6.txt )
180- * 证书详细信息(ISRG Root X1 交叉签名的版本):[ der] ( /certs/2024/e6-cross.der ) 、[ pem] ( /certs/2024/e6-cross.pem ) 、[ txt] ( /certs/2024/e6-cross.txt )
187+ * 证书详细信息(ISRG Root X2 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132905 ) 、 [ der] ( /certs/2024/e6.der ) 、[ pem] ( /certs/2024/e6.pem ) 、[ txt] ( /certs/2024/e6.txt )
188+ * 证书详细信息(ISRG Root X1 交叉签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132904 ) 、 [ der] ( /certs/2024/e6-cross.der ) 、[ pem] ( /certs/2024/e6-cross.pem ) 、[ txt] ( /certs/2024/e6-cross.txt )
181189* ** Let's Encrypt R3**
182190 * 主体:` O = Let's Encrypt, CN = R3 `
183191 * 密钥类型:` RSA 2048 `
184- * 有效期至:2025-09-15
192+ * 有效期至:2025-09-15(已过期)
185193 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=183267 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=183267 )
186194 * 证书详细信息(ISRG Root X1 签名的版本):[ crt.sh] ( https://crt.sh/?id=3334561879 ) 、[ der] ( /certs/lets-encrypt-r3.der ) 、[ pem] ( /certs/lets-encrypt-r3.pem ) 、[ txt] ( /certs/lets-encrypt-r3.txt )
187195 * 证书详细信息(IdenTrust 交叉签名的版本):[ crt.sh] ( https://crt.sh/?id=3479778542 ) 、[ der] ( /certs/lets-encrypt-r3-cross-signed.der ) 、[ pem] ( /certs/lets-encrypt-r3-cross-signed.pem ) 、[ txt] ( /certs/lets-encrypt-r3-cross-signed.txt )
188196* ** Let's Encrypt R4**
189197 * 主体:` O = Let's Encrypt, CN = R4 `
190198 * 密钥类型:` RSA 2048 `
191- * 有效期至:2025-09-15
199+ * 有效期至:2025-09-15(已过期)
192200 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=183268 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=183268 )
193201 * 证书详细信息(ISRG Root X1 签名的版本):[ crt.sh] ( https://crt.sh/?id=3334561877 ) 、[ der] ( /certs/lets-encrypt-r4.der ) 、[ pem] ( /certs/lets-encrypt-r4.pem ) 、[ txt] ( /certs/lets-encrypt-r4.txt )
194202 * 证书详细信息(IdenTrust 交叉签名的版本):[ crt.sh] ( https://crt.sh/?id=3479778543 ) 、[ der] ( /certs/lets-encrypt-r4-cross-signed.der ) 、[ pem] ( /certs/lets-encrypt-r4-cross-signed.pem ) 、[ txt] ( /certs/lets-encrypt-r4-cross-signed.txt )
@@ -197,13 +205,13 @@ show_lastmod: 1
197205 * 密钥类型:` RSA 2048 `
198206 * 有效期至:2027-03-12
199207 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295814 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295814 )
200- * 证书详细信息(ISRG Root X1 签名的版本):[ der] ( /certs/2024/r10.der ) 、[ pem] ( /certs/2024/r10.pem ) 、[ txt] ( /certs/2024/r10.txt )
208+ * 证书详细信息(ISRG Root X1 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132896 ) 、 [ der] ( /certs/2024/r10.der ) 、[ pem] ( /certs/2024/r10.pem ) 、[ txt] ( /certs/2024/r10.txt )
201209* ** Let's Encrypt R11**
202210 * 主体:` O = Let's Encrypt, CN = R11 `
203211 * 密钥类型:` RSA 2048 `
204212 * 有效期至:2027-03-12
205213 * CA 详细信息:[ crt.sh] ( https://crt.sh/?caid=295815 ) 、[ 已签发的证书] ( https://crt.sh/?Identity=%25&iCAID=295815 )
206- * 证书详细信息(ISRG Root X1 签名的版本):[ der] ( /certs/2024/r11.der ) 、[ pem] ( /certs/2024/r11.pem ) 、[ txt] ( /certs/2024/r11.txt )
214+ * 证书详细信息(ISRG Root X1 签名的版本):[ crt.sh ] ( https://crt.sh/?id=12396132897 ) 、 [ der] ( /certs/2024/r11.der ) 、[ pem] ( /certs/2024/r11.pem ) 、[ txt] ( /certs/2024/r11.txt )
207215* ** Let's Encrypt Authority X1**
208216 * 主体:` O = Let's Encrypt, CN = Let's Encrypt Authority X1 `
209217 * 密钥类型:` RSA 2048 `
0 commit comments