Apple Root CA
E771047
Apple Root CA is Apple’s primary root certificate authority that underpins the trust and validation of its digital certificates across Apple platforms and services.
All labels observed (4)
| Label | Occurrences |
|---|---|
| Apple Root CA canonical | 4 |
| Apple PKI hierarchy | 1 |
| Apple Public Key Infrastructure | 1 |
| Apple Root Certificate Program | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T9003040 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Apple Root CA Context triple: [Apple Developer ID certificate, chainOfTrust, Apple Root CA]
-
A.
DST Root CA X3
DST Root CA X3 is a widely trusted root certificate authority operated by IdenTrust that historically provided the cross-signed trust anchor enabling broad browser compatibility for Let’s Encrypt certificates.
-
B.
ISRG Root X1
ISRG Root X1 is the primary root certificate operated by the Internet Security Research Group that underpins the trust for most Let’s Encrypt-issued TLS/SSL certificates used across the web.
-
C.
ISRG Root X2
ISRG Root X2 is a widely trusted intermediate certificate authority operated by the Internet Security Research Group to enable free, automated TLS/SSL certificates for the web.
-
D.
Let’s Encrypt
Let’s Encrypt is a free, automated, and open certificate authority that provides TLS/SSL certificates to enable secure HTTPS connections for websites worldwide.
-
E.
Entrust Technologies
Entrust Technologies is a cybersecurity company known for developing encryption and data protection solutions, including contributions to symmetric-key block cipher design.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Apple Root CA Target entity description: Apple Root CA is Apple’s primary root certificate authority that underpins the trust and validation of its digital certificates across Apple platforms and services.
-
A.
DST Root CA X3
DST Root CA X3 is a widely trusted root certificate authority operated by IdenTrust that historically provided the cross-signed trust anchor enabling broad browser compatibility for Let’s Encrypt certificates.
-
B.
ISRG Root X1
ISRG Root X1 is the primary root certificate operated by the Internet Security Research Group that underpins the trust for most Let’s Encrypt-issued TLS/SSL certificates used across the web.
-
C.
ISRG Root X2
ISRG Root X2 is a widely trusted intermediate certificate authority operated by the Internet Security Research Group to enable free, automated TLS/SSL certificates for the web.
-
D.
Let’s Encrypt
Let’s Encrypt is a free, automated, and open certificate authority that provides TLS/SSL certificates to enable secure HTTPS connections for websites worldwide.
-
E.
Entrust Technologies
Entrust Technologies is a cybersecurity company known for developing encryption and data protection solutions, including contributions to symmetric-key block cipher design.
- F. None of above. chosen
Statements (47)
| Predicate | Object |
|---|---|
| instanceOf |
X.509 public key certificate
ⓘ
root certificate authority ⓘ |
| associatedWith |
Apple Developer ID certificates
ⓘ
Apple ID authentication certificates ⓘ Apple Push Notification service certificates ⓘ
linked to:
Apple Push Notification service
|
| basicConstraints | CA:true ⓘ |
| certificateStandard |
X.509
ⓘ
linked to:
X.509 certificates
|
| commonName | Apple Root CA ⓘ |
| country | US ⓘ |
| governedBy |
Apple Certificate Policy
ⓘ
Apple Certification Practice Statement ⓘ |
| includedIn |
Apple trusted root store
ⓘ
linked to:
Apple root store
iOS trusted root store ⓘ macOS trusted root store ⓘ |
| issuer | Apple Root CA ⓘ |
| keyUsage |
CRL signing
ⓘ
certificate signing ⓘ |
| managedBy | Apple Security Engineering ⓘ |
| operator | Apple Inc. ⓘ |
| organization | Apple Inc. ⓘ |
| owner | Apple Inc. ⓘ |
| partOf |
Apple Public Key Infrastructure
ⓘ
linked to:
Apple Root CA
|
| pathLengthConstraint | allows intermediate CAs ⓘ |
| securityGoal |
authentication
ⓘ
confidentiality ⓘ integrity ⓘ non-repudiation ⓘ |
| subject | Apple Root CA ⓘ |
| supportsProtocol |
SSL
ⓘ
TLS ⓘ |
| trustAnchorFor |
Apple PKI hierarchy
ⓘ
linked to:
Apple Root CA
Apple intermediate certificate authorities ⓘ |
| trustModel | hierarchical PKI ⓘ |
| usedBy |
Apple platforms
ⓘ
iOS ⓘ iPadOS ⓘ macOS ⓘ tvOS ⓘ visionOS ⓘ watchOS ⓘ |
| usedFor |
Apple service authentication
ⓘ
TLS certificate validation ⓘ code signing certificate validation ⓘ software update validation ⓘ |
| validates |
client certificates
ⓘ
code signing certificates ⓘ server certificates ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Apple Root CA Description of subject: Apple Root CA is Apple’s primary root certificate authority that underpins the trust and validation of its digital certificates across Apple platforms and services.
Referenced by (7)
Full triples — surface form annotated when it differs from this entity's canonical label.
subject linked to:
Apple Developer ID certificates
linked to: Apple Root CA
linked to: Apple Root CA
linked to: Apple Root CA