PKI Tutorials - Herong's Tutorial Examples - v2.34, by Herong Yang
Listing of Trusted Root CA in IE
This section provides a tutorial example on how to see the list of trusted root CA (Certificate Authorities) pre-installed in IE.
As learned earlier, the trust of the entire HTTPS Website PKI is based on certificates of trusted root CA (Certificate Authorities) pre-installed in the browser.
Before using the Microsoft browser IE on my computer to visit any HTTPS Websites, I want to see who are those trusted root CAs pre-installed in IE.
1. Run IE and click the "Tools (or Alt-X)" > "Internet Options" menu. The Internet Options dialog box shows up.
2. Click the "Content" tab and the "Certificates" button. The Certificates dialog box shows up.
3. Click the "Trusted Root Certification Authorities" tab. A list of about 65 pre-installed trusted root CA certificates shows up.
Expiration Root CA 2020-05-30 AddTrust External CA Root 2025-05-12 Baltimore CyberTrust Root 2005-01-05 CAEAST.CMGI.COM 2003-11-20 CAEAST.CMGI.COM 2005-01-05 CAEAST.CMGI.COM 2003-11-20 CAEAST.CMGI.COM 2027-06-11 Certum CA 2029-12-31 Certum Trusted Network CA 2019-07-06 Class 2 Primary CA 2028-08-01 Class 3 Public Primary Certification Authority 2038-01-18 COMODO RSA Certification Authority 2028-05-08 COMODO RSA Code Signing CA 1999-12-30 Copyright (c) 1997 Microsoft Corp. 2031-11-09 DigiCert Assured ID Root CA 2031-11-09 DigiCert Global Root CA 2038-01-15 DigiCert Global Root G2 2031-11-09 DigiCert High Assurance EV Root CA 2021-09-30 DST Root CA X3 2029-11-05 D-TRUST Root Class 3 CA 2 2009 2026-11-27 Entrust Root Certification Authority 2030-12-07 Entrust Root Certification Authority - G2 2029-07-24 Entrust.net Certification Authority (2048) 2018-08-22 Equifax Secure Certificate Authority 2022-05-21 GeoTrust Global CA 2036-07-16 GeoTrust Primary Certification Authority 2038-01-18 GeoTrust Primary Certification Authority - G2 2037-12-01 GeoTrust Primary Certification Authority - G3 2022-08-08 Global Enterprise CA 2015-11-17 Global Enterprise CA 2027-09-19 Global Enterprise CA 2029-03-18 GlobalSign 2021-12-15 GlobalSign 2028-01-28 GlobalSign Root CA 2034-06-29 Go Daddy Class 2 Certification Authority 2037-12-31 Go Daddy Root Certificate Authority - G2 ...
But in back in 2015, my IE 10 included about 400 pre-installed trusted root CA certificates. I don't know why IE removed so many of them.
Trusted Root CA Certificate Expiration AAA Certificate Services 12/31/28 ABA.ECOM Root CA 07/09/09 AC Raiz Certicamara S.A. 04/02/30 AC1 RAIZ MTIN 11/03/19 ACCVRAIZ1 12/31/30 ACEDICOM Root 04/13/28 ACNLB 05/15/23 Actalis Authentication CA G1 06/25/22 AddTrust External CA Root 05/30/20 AdminCA-CD-T01 01/25/16 Admin-Root-CA 11/10/21 ADOCA02 01/26/19 AffirmTrust Commercial 12/31/30 Agence Nationale de Certification Electronique 08/12/37 Alibaba.com Corporation Root CA 02/19/16 America Online Root Certification Authority 1 11/19/37 ANCERT Certificados CGN 02/11/24 ANF Server CA 11/30/21 Application CA G2 03/31/16 Arge Daten Oesterreichische Gesellschaft fuer Datenschutz 02/12/09 ATHEX Root CA 10/17/30 Atos TrustedRoot 2011 12/31/30 Autoridad Certificadora Raiz de la Secretaria de Economia 05/08/25 Baltimore CyberTrust Root 05/12/25 Buypass Class 2 CA 1 10/13/16 CA DATEV BT 01 01/09/17 CA Disig 03/21/16 CCA India 2007 07/04/15 Certeurope Root CA 2 03/27/37 CERTICAMARA S.A. 02/23/15 Certificado de la Clave Principal 04/27/12 Certigna 06/29/27 Certinomis - Autorite Racine 09/17/28 Certipost E-Trust Primary Normalised CA 07/26/20 Certisign - Autoridade Certificadora - AC2 06/26/18/ ...
Table of Contents
Introduction of PKI (Public Key Infrastructure)
Introduction of HTTPS (Hypertext Transfer Protocol Secure)
Using HTTPS with Google Chrome
Using HTTPS with Mozilla Firefox
Using HTTPS with Microsoft Edge
►Using HTTPS with IE (Internet Explorer)
Visiting "https" Website with IE
Viewing Server Certificate Details in IE
Viewing Server Certificate Chain in IE
Installing Server Certificate Permanently in IE
Viewing Certificates in Certificate Stores in IE
►Listing of Trusted Root CA in IE
Exporting Certificate to File from IE
Saving Server Certificate to File with IE
IE Supporting Multiple Certificate Chains
IE Reinstalling Root Certificates Automatically
Windows Automatic Root Update Mechanism
Android and Server Certificate
Windows Certificate Stores and Console
RDP (Remote Desktop Protocol) and Server Certificate
macOS Certificate Stores and Keychain Access
Linux Certificate Stores and Tools
Perl Scripts Communicating with HTTPS Servers
PHP Scripts Communicating with HTTPS Servers
Python Scripts Communicating with HTTPS Servers
Java Programs Communicating with HTTPS Servers
.NET Programs Communicating with HTTPS Servers
CAcert.org - Root CA Offering Free Certificates
PKI CA Administration - Issuing Certificates
Comodo Free Personal Certificate
Digital Signature - Microsoft Word
Digital Signature - OpenOffice.org 3