ISRG Root X1

E556220

ISRG Root X1 is the primary root certificate operated by the Internet Security Research Group that underpins the trust for most Let’s Encrypt-issued TLS/SSL certificates used across the web.

All labels observed (2)

Label Occurrences
ISRG Root X1 canonical 5
ISRG Root X1 (for Let’s Encrypt trust) 1

How this entity was disambiguated

Statements (50)

Predicate Object
instanceOf X.509 certificate ⓘ
root certificate ⓘ
authorityKeyIdentifier C4A7B1A47B2C71F0A3E1D9D6D1E5B1B8 ⓘ
basicConstraints CA:TRUE ⓘ
certificatePolicies CA/Browser Forum Baseline Requirements ⓘ
linked to: CA/Browser Forum
country United States ⓘ
crlDistributionPoint http://x1.i.lencr.org/ ⓘ
ecosystemImpact enables free HTTPS for a large portion of the web ⓘ
extendedKeyUsage client authentication (via issued intermediates) ⓘ
server authentication (via issued intermediates) ⓘ
governingCP ISRG Certificate Policy ⓘ
governingCPS Let’s Encrypt Certification Practice Statement ⓘ
linked to: Let’s Encrypt
issuerCommonName ISRG Root X1 ⓘ
keySize 4096-bit ⓘ
keyType RSA ⓘ
keyUsage CRL Sign ⓘ
Certificate Sign ⓘ
notAfter 2035-06-04T11:04:38Z ⓘ
notBefore 2015-06-04T11:04:38Z ⓘ
ocspResponder http://x1.i.lencr.org/ ⓘ
operator Internet Security Research Group ⓘ
organization Internet Security Research Group ⓘ
ownedBy Internet Security Research Group ⓘ
policyOID 2.23.140.1.2.1 ⓘ
publicKeyAlgorithm rsaEncryption ⓘ
purpose TLS/SSL certificate trust anchor ⓘ
web PKI trust ⓘ
relatedIntermediate Let’s Encrypt E1 ⓘ
linked to: Let’s Encrypt

Let’s Encrypt R3 ⓘ
relatedRoot ISRG Root X2 ⓘ
roleInEcosystem primary trust anchor for most Let’s Encrypt certificates ⓘ
selfSigned true ⓘ
serialNumber 0x4001772137D4E942B8EE76AA3C640AB7 ⓘ
signatureAlgorithm sha256WithRSAEncryption ⓘ
subjectCommonName ISRG Root X1 ⓘ
subjectCountry US ⓘ
subjectKeyIdentifier C4A7B1A47B2C71F0A3E1D9D6D1E5B1B8 ⓘ
subjectLocality Los Angeles ⓘ
subjectOrganization Internet Security Research Group ⓘ
subjectOrganizationalUnit ISRG Root X1 ⓘ
subjectState California ⓘ
supportsPathBuildingFor Let’s Encrypt E1 intermediate ⓘ
Let’s Encrypt R3 intermediate ⓘ
trustStoreInclusion Android Root Store ⓘ
Apple Root Certificate Program ⓘ
linked to: Apple Root CA

Microsoft Trusted Root Program ⓘ
Mozilla Root Store ⓘ
Oracle Java Root Store ⓘ
usedBy Let’s Encrypt ⓘ
validityPeriodYears 20 ⓘ

How these facts were elicited

Referenced by (6)

Full triples — surface form annotated when it differs from this entity's canonical label.

Let’s Encrypt → hasRootCertificate → ISRG Root X1 ⓘ
ISRG Root X1 → subjectCommonName → ISRG Root X1 ⓘ
ISRG Root X1 → issuerCommonName → ISRG Root X1 ⓘ
DST Root CA X3 → replacedBy → ISRG Root X1 (for Let’s Encrypt trust) ⓘ
linked to: ISRG Root X1
ISRG Root X2 → relatedTo → ISRG Root X1 ⓘ