Germany
- Certificates
- 101
- Roots
- 17
- Intermediates
- 84
- did:pki
- 101
- Updated
- Model
- Accredited CAs (ETSI Trusted List)
- Governing law
- Reglamento eIDAS (UE) 910/2014 · Vertrauensdienstegesetz (VDG) · Vertrauensdiensteverordnung (VDV)
- Key algorithms
- RSA-2048, RSA-3072, RSA-4096, EC P-256, EC P-384, EC P-521, EC brainpoolP256r1
Germany's qualified-signature trust is a federation of accredited QTSPs (Bundesdruckerei/D-Trust, Deutsche Telekom / Telekom Security / Telesec, Bundesnotarkammer, Atos, dgnservice, Bank-Verlag/BVtrust, medisign/MESIG, GD Netcetera, SIGN8, Utimaco, Deutsche Post, Governikus, exceet, and others) supervised by the Bundesnetzagentur and published in the German national eIDAS Trusted List (TL-DE.XML). The 101 currently-granted CA certificates were promoted wholesale after verifying the Trusted List's XAdES signature through the EU LOTL chain of trust: the LOTL signature was checked against the pinned European Commission signing anchor, and the German TSL's signature (signer: CN=German Trusted List Signer 14, O=Federal Network Agency, C=DE) against the identity the LOTL declares for Germany, so the list's single seal vouches for every certificate it contains (eIDAS Art. 22). Only services with a currently-granted status and a CA / qualified-certificate service type were selected; withdrawn, deprecated, and non-CA services were dropped. Verification evidence is in VERIFICATION.md. Note that the national eID root behind the German identity card (Personalausweis), operated by the BSI, is part of the eID-notification mechanism rather than the QTSP Trusted List and is therefore not included in this set.
Expired certificates are hidden by default; they remain useful only for validating older signatures.
- Root CAValid (1867 days left)
BA-QC-Wurzel-CA-1:PN
Root CAExpired (4071 days ago)BA-QC-Wurzel-CA-2:PN
Root CAExpired (2622 days ago)BVtrust PSD2 QSEAL CA R2019
Root CAValid (1332 days left)BVtrust PSD2 QWAC CA R2019
Root CAValid (1332 days left)BVtrust qSeal CA E2019
Root CAValid (1332 days left)BVtrust qSeal CA R2019
Root CAValid (1332 days left)BVtrust qSig CA E2020
Root CAValid (1332 days left)BVtrust qSig CA R2020
Root CAValid (1332 days left)BVtrust qTime CA R2022
Root CAValid (3158 days left)exceet trustcenter CA2
Root CAValid (3641 days left)GD Netcetera qsealc CA R2026
Root CAValid (3492 days left)GD Netcetera qtime CA R2026
Root CAValid (3492 days left)GD Netcetera seal CA R2026
Root CAValid (3492 days left)GD Netcetera sign CA R2026
Root CAValid (3492 days left)Utimaco qualified TSA CA1
Root CAValid (9140 days left)Utimaco qualified TSA CA2
Root CAValid (9140 days left)ATOS.HBA-qCA1
Intermediate CAValid (440 days left)Issuer "Atos TrustedRoot 1 2019" is not present in this mirror, so the chain cannot be fully resolved here.
ATOS.HBA-qCA2
Intermediate CAValid (440 days left)Issuer "Atos TrustedRoot 2 2019" is not present in this mirror, so the chain cannot be fully resolved here.
ATOS.HBA-qCA5
Intermediate CAValid (1525 days left)Issuer "Atos TrustedRoot 1 2019" is not present in this mirror, so the chain cannot be fully resolved here.
ATOS.HBA-qCA6
Intermediate CAValid (1525 days left)Issuer "Atos TrustedRoot 2 2019" is not present in this mirror, so the chain cannot be fully resolved here.
ATOS.HBA-qCA7
Intermediate CAValid (2574 days left)Issuer "Atos TrustedRoot 1 2019" is not present in this mirror, so the chain cannot be fully resolved here.
ATOS.HBA-qCA8
Intermediate CAValid (2574 days left)Issuer "Atos TrustedRoot 2 2019" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK EC qSig CA 2020
Intermediate CAValid (5147 days left)Issuer "BNotK EC Root CA 2020" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK EC qSig CA 2021
Intermediate CAValid (5483 days left)Issuer "BNotK EC Root CA 2021" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK EC rqSeal CA 2021
Intermediate CAValid (5483 days left)Issuer "BNotK EC Root CA 2021" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK EC rqSig CA 2021
Intermediate CAValid (5483 days left)Issuer "BNotK EC Root CA 2021" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK EC rqSigt CA 2020
Intermediate CAValid (5147 days left)Issuer "BNotK EC Root CA 2020" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK qSig CA 2017
Intermediate CAValid (4079 days left)Issuer "BNotK Root CA 2017" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK qSig CA 2021
Intermediate CAValid (5483 days left)Issuer "BNotK Root CA 2021" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK rqSig CA 2021
Intermediate CAValid (5483 days left)Issuer "BNotK Root CA 2021" is not present in this mirror, so the chain cannot be fully resolved here.
BNotK rqSigt CA 2020
Intermediate CAValid (4079 days left)Issuer "BNotK Root CA 2017" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 1-21-1 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 1 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 1-21-2 2022
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 1 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 1-21-3 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 1 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 1-21-5 2023
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 1 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 2-1 2018
Intermediate CAValid (2614 days left)Issuer "D-TRUST Root CA 2 2018" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 2-1 2020
Intermediate CAValid (2003 days left)Issuer "D-TRUST Root CA 2 2017" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 2-2 EV 2016
Intermediate CAValid (1185 days left)Issuer "D-TRUST Root Class 3 CA 2 EV 2009" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 2-21-1 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 2 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 2-21-2 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 2 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 3-1 2016
Intermediate CAValid (1905 days left)Issuer "D-TRUST Root CA 3 2016" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 3-21-1 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 3 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 3-21-2 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 3 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 3-21-3 2022
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 3 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 4-21-1 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 4 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 4-21-2 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 4 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 4-21-3 2021
Intermediate CAValid (3480 days left)Issuer "D-TRUST Root CA 4 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 5-22-1 2022
Intermediate CAValid (3895 days left)Issuer "D-TRUST Root CA 5 2022" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 5-22-2 2022
Intermediate CAValid (3895 days left)Issuer "D-TRUST Root CA 5 2022" is not present in this mirror, so the chain cannot be fully resolved here.
D-TRUST CA 5-22-3 2022
Intermediate CAValid (3895 days left)Issuer "D-TRUST Root CA 5 2022" is not present in this mirror, so the chain cannot be fully resolved here.
D-Trust.HBA-qCA4
Intermediate CAExpired (1315 days ago)Issuer "D-TRUST Root CA 3 2016" is not present in this mirror, so the chain cannot be fully resolved here.
D-Trust.HBA-qCA5
Intermediate CAExpired (1315 days ago)Issuer "D-TRUST Root CA 3 2016" is not present in this mirror, so the chain cannot be fully resolved here.
D-Trust.HBA-qCA6
Intermediate CAValid (511 days left)Issuer "D-TRUST Root CA 3 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-Trust.HBA-qCA7
Intermediate CAValid (511 days left)Issuer "D-TRUST Root CA 2 2021" is not present in this mirror, so the chain cannot be fully resolved here.
D-Trust.HBA-qCA8
Intermediate CAValid (899 days left)Issuer "D-TRUST Root CA 6 2023" is not present in this mirror, so the chain cannot be fully resolved here.
Deutsche Post AG POSTIDENT E-Signing Sub CA
Intermediate CAValid (304 days left)Issuer "ALMERYS ROOT CA" is not present in this mirror, so the chain cannot be fully resolved here.
Deutsche Telekom AG QSeal CA25A
Intermediate CAValid (4978 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
Deutsche Telekom AG QSeal CA25B
Intermediate CAValid (4978 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
Deutsche Telekom AG QSign CA25A
Intermediate CAValid (4978 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
Deutsche Telekom AG QSign CA25B
Intermediate CAValid (4978 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
Deutsche Telekom SMIME ECC qualified CA 25
Intermediate CAValid (3363 days left)Issuer "Telekom Security SMIME ECC Root 2021" is not present in this mirror, so the chain cannot be fully resolved here.
Deutsche Telekom SMIME qualified CA 25
Intermediate CAValid (2611 days left)Issuer "T-TeleSec GlobalRoot Class 2" is not present in this mirror, so the chain cannot be fully resolved here.
Deutsche Telekom SMIME RSA qualified CA 25
Intermediate CAValid (3363 days left)Issuer "Telekom Security SMIME RSA Root 2023" is not present in this mirror, so the chain cannot be fully resolved here.
dgnservice CA 10:PN
Intermediate CAValid (3888 days left)Issuer "dgnservice Root 7:PN" is not present in this mirror, so the chain cannot be fully resolved here.
dgnservice CA 11:PN
Intermediate CAValid (3888 days left)Issuer "dgnservice Root 7:PN" is not present in this mirror, so the chain cannot be fully resolved here.
dgnservice CA 9:PN
Intermediate CAValid (3888 days left)Issuer "dgnservice Root 7:PN" is not present in this mirror, so the chain cannot be fully resolved here.
dgnservice qCA 12:PN
Intermediate CAValid (3888 days left)Issuer "dgnservice Root 11:PN" is not present in this mirror, so the chain cannot be fully resolved here.
dgnservice qCA 22:PN
Intermediate CAValid (3799 days left)Issuer "dgnservice Root 22:PN" is not present in this mirror, so the chain cannot be fully resolved here.
dgnservice qCA25
Intermediate CAValid (2418 days left)Issuer "dgnservice Root25" is not present in this mirror, so the chain cannot be fully resolved here.
dgnservice qCA35
Intermediate CAValid (2418 days left)Issuer "dgnservice Root35" is not present in this mirror, so the chain cannot be fully resolved here.
MESIG.HBA-qCA 1:PN
Intermediate CAValid (3888 days left)Issuer "medisign Root 1:PN" is not present in this mirror, so the chain cannot be fully resolved here.
MESIG.HBA-qCA 10
Intermediate CAValid (3888 days left)Issuer "medisign Root 4:PN" is not present in this mirror, so the chain cannot be fully resolved here.
MESIG.HBA-qCA 2:PN
Intermediate CAValid (3888 days left)Issuer "medisign Root 1:PN" is not present in this mirror, so the chain cannot be fully resolved here.
MESIG.HBA-qCA 3:PN
Intermediate CAValid (3888 days left)Issuer "medisign Root 1:PN" is not present in this mirror, so the chain cannot be fully resolved here.
MESIG.HBA-qCA 5
Intermediate CAValid (3888 days left)Issuer "medisign Root 2:PN" is not present in this mirror, so the chain cannot be fully resolved here.
MESIG.HBA-qCA25
Intermediate CAValid (2418 days left)Issuer "medisign Root25" is not present in this mirror, so the chain cannot be fully resolved here.
MESIG.HBA-qCA35
Intermediate CAValid (2418 days left)Issuer "medisign Root35" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 GmbH QES SEAL CA 01
Intermediate CAValid (3912 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 GmbH QES SEAL CA 02
Intermediate CAValid (3931 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 GmbH QES SIGNATURE CA 01
Intermediate CAValid (3912 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 GmbH QES SIGNATURE CA 02
Intermediate CAValid (3931 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 QES SEAL CA 03
Intermediate CAValid (4708 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 QES SEAL CA 04
Intermediate CAValid (4708 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 QES SIGNATURE CA 03
Intermediate CAValid (4708 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 QES SIGNATURE CA 04
Intermediate CAValid (4708 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 TIMESTAMP CA 01
Intermediate CAValid (4836 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
SIGN8 TIMESTAMP CA 02
Intermediate CAValid (4843 days left)Issuer "SIGN8 GmbH ROOT CA 01" is not present in this mirror, so the chain cannot be fully resolved here.
Telekom Security EV RSA CA 23
Intermediate CAValid (2424 days left)Issuer "Telekom Security TLS RSA Root 2023" is not present in this mirror, so the chain cannot be fully resolved here.
Telekom Security EV RSA CA 23A
Intermediate CAValid (2508 days left)Issuer "T-TeleSec GlobalRoot Class 3" is not present in this mirror, so the chain cannot be fully resolved here.
Telekom Security OV ECC qualified CA 25
Intermediate CAValid (3363 days left)Issuer "Telekom Security TLS ECC Root 2020" is not present in this mirror, so the chain cannot be fully resolved here.
Telekom Security OV qualified CA 25
Intermediate CAValid (2611 days left)Issuer "T-TeleSec GlobalRoot Class 2" is not present in this mirror, so the chain cannot be fully resolved here.
Telekom Security OV RSA qualified CA 25
Intermediate CAValid (3363 days left)Issuer "Telekom Security TLS RSA Root 2023" is not present in this mirror, so the chain cannot be fully resolved here.
Telekom Security QualifiedID eIDAS QSeal CA 1
Intermediate CAValid (4197 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
Telekom Security QualifiedID eIDAS QSeal CA 2
Intermediate CAValid (4197 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
Telekom Security ServerID EV Class 3 CA
Intermediate CAValid (360 days left)Issuer "T-TeleSec GlobalRoot Class 3" is not present in this mirror, so the chain cannot be fully resolved here.
TeleSec PKS eIDAS QES CA 1
Intermediate CAValid (2096 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
TeleSec PKS eIDAS QES CA 5
Intermediate CAValid (3040 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
TeleSec PKS eIDAS QES CA 6
Intermediate CAValid (3040 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
TSYSI.HBA-qCA7
Intermediate CAValid (926 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
TSYSI.HBA-qCA9
Intermediate CAValid (2024 days left)Issuer "TeleSec qualified Root CA 1" is not present in this mirror, so the chain cannot be fully resolved here.
No certificates match your filter.