Actalis SSL : Actalis Authentication Root CA (PEM)

当前网站所使用的是由 Actalis Domain Validated TLS Server ECC CA 2025 签发的 SSL 证书,该证书在老旧的系统下或因为证书链变动过期等原因,导致访问时出现证书不可信的错误(NET::ERR_CERT_AUTHORITY_INVALID),同时因为配置有 HSTS 的缘故也无法以不安全的方式继续访问。

因为是系统内置根证书过期所导致的问题,解决起来也较为简单算是轻车熟路的了(毕竟之前有《Buypass Go SSL : Buypass Root certificates (Buypass Class 2 CA 5) (PEM)》相关的经验),这里最大的难点就在于如何找到对应的根证书文件了!

由于一时之间在 Actalis 官网中没有找到对应的下载链接,只好退而求其之的在某个证书工具网站中的 PEM 证书下载来使用(在 GitHub 仓库上的因为是.cer格式的不支持。)。

Issuer:
CN=Actalis Authe­ntication Root C­A,O=Actalis S.p.­A./03358520967,L­=Milan,C=IT
Serial:
6271844772424770­508
Not valid before:
2011-09-22 11:22­:02 UTC
Not valid after:
2030-09-22 11:22­:02 UTC
Key size:
4096
Signature Algorithm:
sha256WithRSAEnc­ryption
subjectKeyIdentifier:
52:D8:88:3A:C8:9­F:78:66:ED:89:F3­:7B:38:70:94:C9:­02:02:36:D0
basicConstraints:
CA:TRUE
authorityKeyIdentifier:
keyid:52:D8:88:3­A:C8:9F:78:66:ED­:89:F3:7B:38:70:­94:C9:02:02:36:D­0
keyUsage:
Certificate Sign­, CRL Sign

当前该根证书还在有效期内因此可以下载使用,同时也按照惯例贴上对应的 PEM 内容以供后续是否有用得到的。

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

当前该根证书的信任链层级、 SHA-256 指纹都与新系统内置的证书相差无几,因此可以断定该证书确实是可以在老旧系统中使用的,就是不知道再过几年其再次过期后的事了,但这都是后话了……

  • Actalis Authentication Root CAhttps://ssl-tools.net/subjects/b0e31e6fe1b4e58b38cd4664dd9184b2eead11f6

ChiuYut

2026年08月04日

发布者

ChiuYut

咦?我是谁?这是什么地方? Ya ha!我是ChiuYut!这里是我的小破站!