根证书是属于证书颁发机构(CA)的公钥证书,是 SSL 证书信任链的起始点。本文将指导您如何下载根证书。
如果您的业务通过浏览器进行访问,例如网站,则无需关注根证书。因为根证书已经内置在浏览器中,您只需在 Web 服务上安装已颁发的 SSL证书,即可实现浏览器与 Web 服务的 HTTPS 通信。
如果您的业务需要通过非浏览器客户端访问您的服务,由于客户端没有预先内置根证书,您需要在对应客户端中安装根证书,保证客户端与服务端的正常通信。
注意:
在非浏览器客户端中安装根证书,可能会因为根证书过期失效或策略变更等原因导致您的业务受到影响。推荐您使用系统默认信任库等方式进行客户端校验。
由于各客户端服务类型不同,安装根证书请咨询您的客户端开发商或开发者。
Certum 根证书
官网
https://www.certum.eu/en/cert_expertise_root_certificates/#id5
在用的根证书
-----BEGIN CERTIFICATE----- MIIEtDCCA5ygAwIBAgIRAJOShUABZXFflH8oj+/JmygwDQYJKoZIhvcNAQELBQAw PjELMAkGA1UEBhMCUEwxGzAZBgNVBAoTElVuaXpldG8gU3AuIHogby5vLjESMBAG A1UEAxMJQ2VydHVtIENBMB4XDTA4MTAyMjEyMDczN1oXDTI3MDYxMDEwNDYzOVow fjELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEiMCAG A1UEAxMZQ2VydHVtIFRydXN0ZWQgTmV0d29yayBDQTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAOP7faNyusLwyRSH9WsBTuFuQAe6bSddf/dbLbNax1Ff q6QypmGHtm4PhtIwApf412lXoRg5XWpkecYBWaw8MUo4fNIE0kso6CBfOweizE1z 2/OuT8dW1Vqnlon686to1COGWSfPCSe8rG5ygxwwct/gounS4XR1Gb0qnnsVVAQb 10M5rVUoxeIau/TA5K44STPMdoWfOUXSpJ7yEoxR+HzkLX/1rF/rFp+xLdG6zJFC d0wlyZA4b9vwzPuOHpdZPtVgTuYFKO1JeRNLukjbL/ly0znK/h/YNHL1tEDPMQHD 7N4RLRddH7hQ0V4Zp2neBzMoylCV+adUy1SGUEWp+UkCAwEAAaOCAWswggFnMA8G A1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFAh2zcsH/yT2xc3tu5C84oQ3RnX3MFIG A1UdIwRLMEmhQqRAMD4xCzAJBgNVBAYTAlBMMRswGQYDVQQKExJVbml6ZXRvIFNw LiB6IG8uby4xEjAQBgNVBAMTCUNlcnR1bSBDQYIDAQAgMA4GA1UdDwEB/wQEAwIB BjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vY3JsLmNlcnR1bS5wbC9jYS5jcmww aAYIKwYBBQUHAQEEXDBaMCgGCCsGAQUFBzABhhxodHRwOi8vc3ViY2Eub2NzcC1j ZXJ0dW0uY29tMC4GCCsGAQUFBzAChiJodHRwOi8vcmVwb3NpdG9yeS5jZXJ0dW0u cGwvY2EuY2VyMDkGA1UdIAQyMDAwLgYEVR0gADAmMCQGCCsGAQUFBwIBFhhodHRw Oi8vd3d3LmNlcnR1bS5wbC9DUFMwDQYJKoZIhvcNAQELBQADggEBAI3m/UBmo0yc p6uh2oTdHDAH5tvHLeyDoVbkHTwmoaUJK+h9Yr6ydZTdCPJ/KEHkgGcCToqPwzXQ 1aknKOrS9KsGhkOujOP5iH3g271CgYACEnWy6BdxqyGVMUZCDYgQOdNv7C9C6kBT Yr/rynieq6LVLgXqM6vp1peUQl4E7Sztapx6lX0FKgV/CF1mrWHUdqx1lpdzY70a QVkppV4ig8OLWfqaova9ML9yHRyZhpzyhTwd9yaWLy75ArG1qVDoOPqbCl60BMDO TjksygtbYvBNWFA0meaaLNKQ1wmB1sCqXs7+0vehukvZ1oaOGR+mBkdCcuBWCgAc eLmNzJkEN0k= -----END CERTIFICATE-----
ssl.com 根证书
官网
https://www.ssl.com/zh-CN/%E7%9F%A5%E8%AF%86%E5%BA%93/
下载地址
https://www.ssl.com/repository/SSLcom-RootCAs.zip
-----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIRAP+ygvcoMZtiuvS4Tw3+kzkwDQYJKoZIhvcNAQELBQAw ezELMAkGA1UEBhMCR0IxGzAZBgNVBAgMEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBwwHU2FsZm9yZDEaMBgGA1UECgwRQ29tb2RvIENBIExpbWl0ZWQxITAfBgNV BAMMGEFBQSBDZXJ0aWZpY2F0ZSBTZXJ2aWNlczAeFw0yNTA4MDEwMDAwMDBaFw0y ODEyMzEyMzU5NTlaME4xCzAJBgNVBAYTAlVTMRgwFgYDVQQKDA9TU0wgQ29ycG9y YXRpb24xJTAjBgNVBAMMHFNTTC5jb20gVExTIFJTQSBSb290IENBIDIwMjIwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQpAlyT0CIEmE+NSOe7vZ0zy97 WD3OPA0QKJAvl/eMSNig2CWxTLARTBdzUNAiSmO7gdMpbtW1CT4mGH+yEn+TmLev 8Da/8u4Ynpw7UsVHGV1082Rm1V3HaLS/GxwGo7yPQCO2HsaEvVHEGznBldIp7Euu ey2/Of20Yt6We0HGnKDgBnL78AeXCTmBdK/3NFkRVwrCW8Ek9DFzMILGnboC9z58 RF+DDfPx3SBpFglQ4tRVtuCAcnZuTEe3dVVZtFN02ZTGQa1YijFmDx6iGylATi/f e+YWLC38v+zztPq+GPabSdTuBW7ZNPOc8ewBi9Egxg+gtbwXTkh7UcL86VxpN0dm s2j4FSjwudOkFcxaT7pScKMSRd3Guk77wtD3qFInbW55tYz8e4zBFkzugH++8Ha+ QVMSM65aOEKr1w8+QY12BzLVq4n2TmfZsUJ1I27zzUKy/FX1U4cXO8AzWPFS0vmA pPDo8DuLOMykxpB/D5z9i9Gjz9qDp2nJUDbVXAXSCkF022MRN8GloJZLHowWEneu lDR7Hn/CZgDkqoPqipCtzjZETdFR6bwf82oF/cB0HyUZQFFu6oJRQN+buQgqBgLV IxwT1unb28awest7J5v74NVGJO0QS2NLpQWPurgdK6b6keKSUr3s62eXbZotn4Ey BWcy+0gIP9kluAQlLwIDAQABo4IBlzCCAZMwHwYDVR0jBBgwFoAUoBEKIz6W8Qfs 4q8p74Klf9AwpLQwHQYDVR0OBBYEFPsuN+7jhHonLs0ZNbEzfP/UREK5MA4GA1Ud DwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgECMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjCBkgYDVR0gBIGKMIGHMAcGBWeBDAEBMAgGBmeBDAECATAI BgZngQwBAgIwCAYGZ4EMAQIDMA4GDCsGAQQBgqkwAQMBATAOBgwrBgEEAYKpMAED AQIwDgYMKwYBBAGCqTABAwEDMA4GDCsGAQQBgqkwAQMBBDAOBgwrBgEEAYKpMAED AQUwDgYMKwYBBAGCqTABAwEGMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwu Y29tb2RvY2EuY29tL0FBQUNlcnRpZmljYXRlU2VydmljZXMuY3JsMDQGCCsGAQUF BwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY29tb2RvY2EuY29tMA0G CSqGSIb3DQEBCwUAA4IBAQB6GuqiV0P/BPtHYkhy1lSqbHGhAzwVtRPpcFqPQjYV w9wvwBxex/7dzzsCLHIIH+TGv3JpmTtUSNTKhm1EXRR9Uc9h8l6OALhNK70oVEzw OLRfAdLc0oaczE8/aVWxxGWUF9i4TXrklD7psIlUUX0x/AbcuJGOjTgZWw4iHAMM fLuw20YqGNXZAL8hiQnDXI5WtaIAw8rGkLiaFBOhdwPHl+1CdLGxXVzafaXFI3BS SXKXq2AgdbjVmkM6yj2cihLBlLGBDtkXdZ4bRMYxUMQTX5057SzRk8NxIurm+4W6 ZrI4zH+N6ocqOwihhYe05n/JEcim7g6wZjA1KHFv2ajA -----END CERTIFICATE-----