Microsoft Windows Roots -  April 2026 compared to Oct 2025

Added 15 new certificates

GeoTrust Universal CA (GeoTrust Inc.), Expires: 2029-03-04, Fingerprint: a0459b9f63b22559f5fa5d4c6db3f9f72ff19342033578f073bf1d1b46cbb912
SSC GDL CA VS Root (Skaitmeninio sertifikavimo centras) OU: VS ROOT Services, Expires: 2033-06-04, Fingerprint: bc2abbc49a6814370d17e471141c22794311c4dddf2567be37283a894392e5d3
Symantec Class 1 Public Primary Certification Authority - G4 (Symantec Corporation) OU: Symantec Trust Network, Expires: 2038-01-18, Fingerprint: 363f3c849eab03b0a2a0f636d7b86d04d3ac7fcfe26a0a9121ab9795f6e176df
Symantec Class 2 Public Primary Certification Authority - G4 (Symantec Corporation) OU: Symantec Trust Network, Expires: 2038-01-18, Fingerprint: fe863d0822fe7a2353fa484d5924e875656d3dc9fb58771f6f616f9d571bc592
Telia EC Client Root CA v3 (Telia Company AB), Expires: 2048-05-23, Fingerprint: ccf6a7c3881928cfb1dbebd74eaba50d3bc69633c106274d2c221eccee697e87
Telia EC Email Root CA v3 (Telia Company AB), Expires: 2048-05-23, Fingerprint: 3682228d7d678b571440cf1cb34e69fb4135fd6c2a1be38e14163b711e02ae01
Telia EC Signing Root CA v3 (Telia Company AB), Expires: 2048-05-23, Fingerprint: 2c4e9b0f8d0fcdc308c077e30dd2349daf871fb3a37214859c486189a9f80adb
Telia EC TLS Root CA v3 (Telia Company AB), Expires: 2048-05-23, Fingerprint: 098e08a91dbbf77478b96cceb89b1413a5da37b7c862606a955deb07179f4326
Telia RSA Client Root CA v3 (Telia Company AB), Expires: 2048-05-23, Fingerprint: 6485f6e060934af413ec54b9c65f87bd231929ecfa11de522bad8dc64f001571
Telia RSA Email Root CA v3 (Telia Company AB), Expires: 2048-05-23, Fingerprint: 5b0c502a7d963ba55217396fda9b3dc78171000aeeff42cecc3a20a7938163e8
Telia RSA Signing Root CA v3 (Telia Company AB), Expires: 2048-05-23, Fingerprint: c2fb44d8def85126d84fc41fbe667bc811f0d633411cac26d13fbd95ea5be603
Telia RSA TLS Root CA v3 (Telia Company AB), Expires: 2048-05-23, Fingerprint: d13db1294c45ebc6fc86c6bbf69fa29bdfe692dff7c713c243c7a956c6a2284c
Trustis Limited (Trustis Limited) OU: Trustis FPS Root CA, Expires: 2024-01-21, Fingerprint: c1b48299aba5208fe9630ace55ca68a03eda5a519c8802a0d3a673be8f8e557d
esignit.org (), Expires: 2030-06-20, Fingerprint: c665175bd60ed70a5eea3344cbe5d1a6936f79bc27a8384e4c734200417c279f
http://www.anf.es (ANF Autoridad de Certificacion) OU: ANF Clase 1 CA, Expires: 2033-06-05, Fingerprint: e0e17aea06cf9ce12aae8190345a2c59720130a7d8ff72f3745ad75dbaa365b6


Removed 16 old certificates

AC Raíz Certicámara S.A. (Sociedad Cameral de Certificación Digital - Certicámara S.A.), Expires: 2031-05-24, Fingerprint: d2a90e5d35cac4d41f7d44ce66aff885e1815fb339185853a87e66c05c9bef1e
Autoridade Certificadora Raiz Brasileira v1 (ICP-Brasil) OU: Instituto Nacional de Tecnologia da Informacao - ITI, Expires: 2021-07-29, Fingerprint: cbd8ed38d4a2d677d453d70dd8890af4f6374cba6299943f1ab3a6936c6fd795
Autoridade Certificadora Raiz Brasileira v2 (ICP-Brasil) OU: Instituto Nacional de Tecnologia da Informacao - ITI, Expires: 2023-06-21, Fingerprint: fb47d92a9909fd4fa9bec02737543e1f3514ced747407a8d9cfa397b0915067c
CCA India 2014 (India PKI), Expires: 2024-03-05, Fingerprint: 60109bc6c38328598a112c7a25e38b0f23e5a7511cb815fb64e0c4ff05db7df7
CCA India 2015 SPL (India PKI), Expires: 2025-01-29, Fingerprint: c34c5df53080078ffe45b21a7f600469917204f4f0293f1d7209393e5265c04f
E-Tugra Global Root CA ECC v3 (E-Tugra EBG A.S.) OU: E-Tugra Trust Center, Expires: 2045-03-12, Fingerprint: 873f4685fa7f563625252e6d36bcd7f16fc24951f264e47e1b954f4908cdca13
E-Tugra Global Root CA RSA v3 (E-Tugra EBG A.S.) OU: E-Tugra Trust Center, Expires: 2045-03-12, Fingerprint: ef66b0b10a3cdb9f2e3648c76bd2af18ead2bfe6f117655e28c4060da1a3f4c2
Echoworx Root CA2 (Echoworx Corporation) OU: Certification Services, Expires: 2030-10-07, Fingerprint: 6639d13cab85df1ad9a23c443b3a60901e2b138d456fa71183578108884ec6bf
Fotanúsítványkiadó - Kormányzati Hitelesítés Szolgáltató (NISZ Nemzeti Infokommunikációs Szolgáltató Zrt.), Expires: 2033-09-13, Fingerprint: c2157309d9aee17bf34f4df5e88dbaeba57e0361eb814cbc239f4d54d329a38d
GPKIRootCA1 (Government of Korea) OU: GPKI, Expires: 2031-08-03, Fingerprint: 407c276bead2e4af0661ef6697341dec0a1f9434e4eafb2d3d32a90549d9de4a
Hellenic Academic and Research Institutions ECC RootCA 2015 (Hellenic Academic and Research Institutions Cert. Authority), Expires: 2040-06-30, Fingerprint: 44b545aa8a25e65a73ca15dc27fc36d24c1cb9953a066539b11582dc487b4833
Hellenic Academic and Research Institutions RootCA 2011 (Hellenic Academic and Research Institutions Cert. Authority), Expires: 2031-12-01, Fingerprint: bc104f15a48be709dca542a7e1d4b9df6f054527e802eaa92d595444258afe71
Hellenic Academic and Research Institutions RootCA 2015 (Hellenic Academic and Research Institutions Cert. Authority), Expires: 2040-06-30, Fingerprint: a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36
PostSignum Root QCA 2 (Ceská pota, s.p. [IC 47114983]), Expires: 2025-01-19, Fingerprint: ad016f958050e0e7e46fae7dcc50197ed8e3ff0a4b262e5ddcdb3edddc7d6578
SECOM Trust.net (SECOM Trust.net) OU: Security Communication RootCA1, Expires: 2023-09-30, Fingerprint: e75e72ed9f560eec6eb4800073a43fc3ad19195a392282017895974a99026b6c
VRK Gov. Root CA (Vaestorekisterikeskus CA) OU: Certification Authority Services, Varmennepalvelut, Expires: 2023-12-18, Fingerprint: f008733ec500dc498763cc9264c6fcea40ec22000e927d053ce9c90bfa046cb2
