Google Online Security Blog: The foundation of a more secure web

Security Blog

The latest news and insights from Google on security and safety on the Internet

The foundation of a more secure web

26 de enero de 2017

Posted by Ryan Hurst, Security and Privacy Engineeringhttps://www.google.com/transparencyreport/https/https://pki.goog table, th, td { border: 1px solid black; }

Public Key

Fingerprint (SHA1)

Valid Until

GTS Root R1

RSA 4096, SHA-384

e1:c9:50:e6:ef:22:f8:4c:56:45:72:8b:92:20:60:d7:d5:a7:a3:e8

Jun 22, 2036

GTS Root R2

RSA 4096, SHA-384

d2:73:96:2a:2a:5e:39:9f:73:3f:e1:c7:1e:64:3f:03:38:34:fc:4d

Jun 22, 2036

GTS Root R3

ECC 384, SHA-384

30:d4:24:6f:07:ff:db:91:89:8a:0b:e9:49:66:11:eb:8c:5e:46:e5

Jun 22, 2036

GTS Root R4

ECC 384, SHA-384

2a:1d:60:27:d9:4a:b1:0a:1c:4d:91:5c:cd:33:a0:cb:3e:2d:54:cb

Jun 22, 2036

GS Root R2

RSA 2048, SHA-1

75:e0:ab:b6:13:85:12:27:1c:04:f8:5f:dd:de:38:e4:b7:24:2e:fe

Dec 15, 2021

GS Root R4

ECC 256, SHA-256

69:69:56:2e:40:80:f4:24:a1:e7:19:9f:14:ba:f3:ee:58:ab:6a:bb

Jan 19, 2038

Public Key

Fingerprint (SHA1)

Valid Until

GS Root R3

RSA 2048, SHA-256

d6:9b:56:11:48:f0:1c:77:c5:45:78:c1:09:26:df:5b:85:69:76:ad

Mar 18, 2029

GeoTrust

RSA 2048, SHA-1

de:28:f4:a4:ff:e5:b9:2f:a3:c5:03:d1:a3:49:a7:f9:96:2a:82:12

May 21, 2022

If you are building products that intend to connect to a Google property moving forward you need to at minimum include the above Root Certificates. With that said even though we now operate our own roots, we may still choose to operate subordinate CAs under third-party operated roots.

For this reason if you are developing code intended to connect to a Google property, we still recommend you include a wide set of trustworthy roots. Google maintains a sample PEM file at (https://pki.goog/roots.pem) which is periodically updated to include the Google Trust Services owned and operated roots as well as other roots that may be necessary now, or in the future to communicate with and use Google Products and Services.