Certificate Chain

A certificate chain (or chain of trust) is an ordered list of digital certificates used to verify the legitimacy and authenticity of a server's SSL/TLS certificate.

Details

Who Is Responsible for Importing (or Pinning) a Certificate Chain?

If your application uses a pinned CA bundle, ensure that it is updated to include the new Root CA and Intermediate Certificate.

Remark: In general, importing the certificate chain into the system is not required, as it is automatically updated through operating system updates.

Getting Started

Please verify the CA bundle below. If your application is configured with a pinned CA bundle, please update it to include the latest Root CA and Intermediate Certificates to ensure continued trust and proper certificate validation.

The Root CA Certificate

Name: AAA Certificate Services

Name: USERTrust RSA Certification Authority

Name: GTS Root R1

Name: GTS Root R2

Name: GTS Root R3

Name: GTS Root R4

Name: GlobalSign R4

The Intermediate Certificate

Name: Sectigo Public Server Authentication Root R46

Name: ZeroSSL RSA DV SSL CA 2

Name: AE1

Name: GTS Root R1 Cross

Name: GTS Root R4 Cross

Name: MR1

Name: WE1 issued by GTS Root R4

Name: WE1 issued by GlobalSign R4

Name: WE2 issued by GTS Root R4

Name: WE2 issued by GlobalSign R4

Name: WE3 issued by GTS Root R4

Name: WE3 issued by GlobalSign R4

Name: WE4 issued by GTS Root R4

Name: WE4 issued by GlobalSign R4

Name: WE5

Name: WR1

Name: WR2

Name: WR3

Name: WR4

Name: WR5

Support

General Enquiries cchelp@ust.hk
Suggestions & Complaints cclisten@ust.hk
Serviceline +852-2358-6200