## 20160306 AK
----
[[Roots/StateOverview/CZ|Ĩesky]] | '''english'''
----
. '''To [[Roots/NewRootsTaskForce|New Roots Task Force]]''' - '''To [[Roots/EscrowAndRecovery|Escrow And Recovery]]''' - '''To [[Roots/Structure|Roots Structure]]''' - '''To [[Roots/Library|Roots Library]]'''
. '''To [[Roots/Class3ResignProcedure/Migration|Class3 Re-sign Project Overview]]'''
----
= Overview of CAcert Roots and Subroots =
||<#80ff80 -5> '''Current Active Production Roots and Subroots x1)''' ||
|| ''key type'' || ''purpose'' || ''check sum'' || ''Audit State'' || ''Publishing State'' ||
||<#80ff80 -5> '''2021-04-19 Class3 Root Re-sign project''' ||
|| '''Root Key<
>class 1''' (serial# 0F)<
>''sha256 signed'' || [[http://www.cacert.org/policy/CertificationPracticeStatement.php|CPS table 1.4.5]] || sha1 DD:FC:DA:54:1E:75:77:AD:DC:A8:7E:88:27:A9:8A:50:60:32:52:A5 <
> sha256 07:ED:BD:82:4A:49:88:CF:EF:42:15:DA:20:D4:8C:2B:41:D7:15:29:D7:C9:00:F5:70:92:6F:27:7C:C2:30:C5 || {-} fail || {+} published, active since 2019-02-14 ||
|| '''Sub-Root Key<
>class 3''' (serial# 14E228)<
>''sha256 signed'' || [[http://www.cacert.org/policy/CertificationPracticeStatement.php|CPS table 1.4.5]] || sha1 D8:A8:3A:64:11:7F:FD:21:94:FE:E1:98:3D:D2:5C:7B:32:A8:FF:C8 <
> sha256 1B:C5:A6:1A:2C:0C:01:32:C5:2B:28:4F:3D:A0:D8:DA:CF:71:7A:0F:6C:1D:DF:81:D8:0B:36:EE:E4:44:28:69 || {-} fail || {+} published, active since 2021-04-19 ||
||<#80ffff -5> '''Previously active Roots and Subroots''' ||
||<#80ffff -5> '''2016-03-12 Root Re-sign project x6)''' ||
|| '''Root Key<
>class 1''' (serial# 0F)<
>''sha256 signed'' || [[http://www.cacert.org/policy/CertificationPracticeStatement.php|CPS table 1.4.5]] || sha1 DD:FC:DA:54:1E:75:77:AD:DC:A8:7E:88:27:A9:8A:50:60:32:52:A5 <
> sha256 07:ED:BD:82:4A:49:88:CF:EF:42:15:DA:20:D4:8C:2B:41:D7:15:29:D7:C9:00:F5:70:92:6F:27:7C:C2:30:C5 || {-} fail || {+} published, active since 2019-02-14 ||
|| '''Sub-Root Key<
>class 3''' (serial# 0E)<
>''sha256 signed'' || [[http://www.cacert.org/policy/CertificationPracticeStatement.php|CPS table 1.4.5]] || sha1 A7:C4:8F:BE:6B:02:6D:BD:0E:C1:B4:65:B8:8D:D8:13:EE:1D:EF:A0 <
> sha256 F6:87:3D:70:D6:75:96:C2:AC:BA:34:40:1E:69:73:8B:52:70:1D:D6:AB:06:B4:97:49:BC:55:15:09:36:D5:44 || {-} fail || {+} published, obsolete ||
||<#80ffff -5> '''2003-03-30 Root (serial# 00)''' ||
|| '''Root Key<
>class 1'''<
>''md5 signed'' || || sha1 13:5C:EC:36:F4:9C:B8:E9:3B:1A:B2:70:CD:80:88:46:76:CE:8F:33<
>md5 A6:1B:37:5E:39:0D:9C:36:54:EE:BD:20:31:46:1F:6B || {-} fail || {+} published, obsolete ||
||<#80ffff -5> '''2011-05-23 Class3 Subroot Re-sign Project (serial# 0A:41:8A) x4)''' ||
|| '''Sub-Root<
>class 3'''<
>''sha256 signed'' || || sha1 AD:7C:3F:64:FC:44:39:FE:F4:E9:0B:E8:F4:7C:6C:FA:8A:AD:FD:CE<
>md5 F7:25:12:82:4E:67:B5:D0:8D:92:B7:7C:0B:86:7A:42 || {-} fail || {+} published, obsolete ||
||<#b8c5d9 -5> '''2005-10-14 Class3 Subroot (serial# 01) deactivated''' ||
|| Sub-Root<
>class 3<
>''md5 signed'' || || sha1 DB:4C:42:69:07:3F:E9:C2:A3:7D:89:0A:5C:1B:18:C4:18:4E:2A:2D<
>md5 73:3F:35:54:1D:44:C9:E9:5A:4A:EF:51:AD:03:06:B6 || {-} fail || {-} replaced, inactive ||
||<#ff8080 -5> '''2008 Roots and Subroots x2)''' ||
|| ''key type'' || ''purpose'' || ''check sum'' || ''Audit State'' || ''Publishing State'' ||
||Root Key ||Sub-Root Key signing ||sha1 79:9B:6C:6C:CD:B9:E4:12:EE:5A:58:F0:9A:2C:8B:20:A0:E0:CA:A7 || {-} fail || {-} unpublished ||
||Sub-Root Key 1 ||non-assured ||sha1 53:7C:1D:5D:F7:44:66:33:B2:78:F2:BE:27:9E:72:CC:F2:08:53:2D || {-} fail || {-} unpublished ||
||Sub-Root Key 2 ||assured ||sha1 58:0F:C9:2E:45:D7:43:B8:68:D2:60:82:C0:60:B2:01:0D:A2:46:C2 || {-} fail || {-} unpublished ||
||Sub-Root Key 3 ||spare || || {-} fail || {-} unpublished ||
||Sub-Root Key 4 ||spare || || {-} fail || {-} unpublished ||
||<#ffff80 -5> '''201x Roots and Subroots x3) x5)''' ||
|| ''key type'' || ''purpose'' || ''check sum'' || ''Audit State'' || ''Publishing State'' ||
||<-3> planning || ./. || ./. ||
. x1) [[http://www.cacert.org/index.php?id=3|http://www.cacert.org/index.php?id=3]]
. x2) [[Roots/20081128|2008 Roots]]
. x3) [[Roots/NewRootsTaskForce|New Roots Task Force]]
. x4) [[Roots/Class3ResignProcedure/Migration|Class3 Subroot Resign Project May 2011]]
. x5) [[Roots/EscrowAndRecovery/NRE|New Roots & Escrow Project]]
. x6) [[Audit/Results/session2016.1|SHA256 Root Resign Project]]
----
. CategoryAudit
. CategoryNewRootsTaskForce