ISRG Root X1

E556220

ISRG Root X1 is the primary root certificate operated by the Internet Security Research Group that underpins the trust for most Let’s Encrypt-issued TLS/SSL certificates used across the web.

All labels observed (2)

Label Occurrences
ISRG Root X1 canonical 5
ISRG Root X1 (for Let’s Encrypt trust) 1

How this entity was disambiguated

Statements (50)

Predicate Object
instanceOf X.509 certificate
root certificate
authorityKeyIdentifier C4A7B1A47B2C71F0A3E1D9D6D1E5B1B8
basicConstraints CA:TRUE
certificatePolicies CA/Browser Forum Baseline Requirements
linked to: CA/Browser Forum
country United States
crlDistributionPoint http://x1.i.lencr.org/
ecosystemImpact enables free HTTPS for a large portion of the web
extendedKeyUsage client authentication (via issued intermediates)
server authentication (via issued intermediates)
governingCP ISRG Certificate Policy
governingCPS Let’s Encrypt Certification Practice Statement
linked to: Let’s Encrypt
issuerCommonName ISRG Root X1
keySize 4096-bit
keyType RSA
keyUsage CRL Sign
Certificate Sign
notAfter 2035-06-04T11:04:38Z
notBefore 2015-06-04T11:04:38Z
ocspResponder http://x1.i.lencr.org/
operator Internet Security Research Group
organization Internet Security Research Group
ownedBy Internet Security Research Group
policyOID 2.23.140.1.2.1
publicKeyAlgorithm rsaEncryption
purpose TLS/SSL certificate trust anchor
web PKI trust
relatedIntermediate Let’s Encrypt E1
linked to: Let’s Encrypt

Let’s Encrypt R3
relatedRoot ISRG Root X2
roleInEcosystem primary trust anchor for most Let’s Encrypt certificates
selfSigned true
serialNumber 0x4001772137D4E942B8EE76AA3C640AB7
signatureAlgorithm sha256WithRSAEncryption
subjectCommonName ISRG Root X1
subjectCountry US
subjectKeyIdentifier C4A7B1A47B2C71F0A3E1D9D6D1E5B1B8
subjectLocality Los Angeles
subjectOrganization Internet Security Research Group
subjectOrganizationalUnit ISRG Root X1
subjectState California
supportsPathBuildingFor Let’s Encrypt E1 intermediate
Let’s Encrypt R3 intermediate
trustStoreInclusion Android Root Store
Apple Root Certificate Program
linked to: Apple Root CA

Microsoft Trusted Root Program
Mozilla Root Store
Oracle Java Root Store
usedBy Let’s Encrypt
validityPeriodYears 20

How these facts were elicited

Referenced by (6)

Full triples — surface form annotated when it differs from this entity's canonical label.

Let’s Encrypt hasRootCertificate ISRG Root X1
ISRG Root X1 subjectCommonName ISRG Root X1
ISRG Root X1 issuerCommonName ISRG Root X1
DST Root CA X3 replacedBy ISRG Root X1 (for Let’s Encrypt trust)
linked to: ISRG Root X1
ISRG Root X2 relatedTo ISRG Root X1