TrustAsia SSL : DigiCert Global Root G2 (PEM)

同样的另外一个使用由 TrustAsia DV TLS RSA CA 2025 所签发的 SSL 证书的网站,在同一老旧设备系统下也是出现NET::ERR_CERT_AUTHORITY_INVALID的错误,都已经老生常谈的解决办法了吧!

按图索骥依葫芦画瓢,根据证书链去找到所对应的根证书下载即可,由于前一个证书走“捷径”下载的,因此这一个也是如此操作了,懒得去对应官网翻找了。

证书信息:

Issuer:
CN=VeriSign Clas­s 3 Public Prima­ry Certification­ Authority - G5,­OU=(c) 2006 Veri­Sign\, Inc. - Fo­r authorized use­ only,OU=VeriSig­n Trust Network,­O=VeriSign\, Inc­.,C=US
CN=DigiCert Glob­al Root G2,OU=ww­w.digicert.com,O­=DigiCert Inc,C=­US
Serial:
1317184548932496­5082433287354037­1544128
4293743540046975­3785348795032022­53541
Not valid before:
2017-11-06 00:00­:00 UTC
2013-08-01 12:00­:00 UTC
Not valid after:
2022-11-05 23:59­:59 UTC
2038-01-15 12:00­:00 UTC
Key size:
2048
Signature Algorithm:
sha256WithRSAEnc­ryption
subjectKeyIdentifier:
4E:22:54:20:18:9­5:E6:E3:6E:E6:0F­:FA:FA:B9:12:ED:­06:17:8F:39
basicConstraints:
CA:TRUE
certificatePolicies:
Policy: X509v3 A­ny Policy­ CPS: https://d­.symcb.com/cps­ User Notice:­ Explicit Tex­t: https://d.sym­cb.com/rpa
crlDistributionPoints:
Full Name:­ URI:http://s.s­ymcb.com/pca3-g5­.crl
keyUsage:
Digital Signatur­e, Certificate S­ign, CRL Sign
authorityInfoAccess:
OCSP - URI:http:­//s.symcd.com
authorityKeyIdentifier:
keyid:7F:D3:65:A­7:C2:DD:EC:BB:F0­:30:09:F3:43:39:­FA:02:AF:33:31:3­3

其中发现这里有两个证书可供下载,二话不说还是下载属于self signed的先。

-----BEGIN CERTIFICATE-----
MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI
2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx
1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ
q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz
tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ
vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP
BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV
5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY
1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4
NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG
Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91
8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe
pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl
MrY=
-----END CERTIFICATE-----

使用这个证书可知:在信任链层级、 SHA-256 指纹都与新系统内置的证书相差无几,因此暂时可以先不安装e995ef9126这个了。

系统这么老看来还有得安装根证书的,因此还是放出捷径以备不时之需:

  • DigiCert Global Root G2https://ssl-tools.net/subjects/39d28b71fe1d19b65fb3f1288f23bc04595c4395
  • Root Certificateshttps://ssl-tools.net/certificates

ChiuYut

2026年08月04日

发布者

ChiuYut

咦?我是谁?这是什么地方? Ya ha!我是ChiuYut!这里是我的小破站!