This page publishes the root CA certificates used to verify CanoKey FIDO and PIV attestation certificate chains. Each certificate is listed separately so verifiers can select the root matching the attestation chain.
All times are in UTC. SHA-256 fingerprints are calculated over the DER-encoded certificates.
| Field | Value |
|---|---|
| Subject | CN=CanoKeys FIDO Attestation Root CA No.2 |
| Serial number | 6AD9FD463F2E08C8CBAE615F090618E7F5FDC6AE |
| Not before (UTC) | 2021-12-27 11:49:33 |
| Not after (UTC) | 2041-06-25 11:49:33 |
SHA-256 fingerprint:
4E:DE:7E:8E:21:6A:4D:47:F1:5A:C2:1F:8F:B8:0D:6B:AF:D4:0E:95:AB:31:10:F3:4E:4F:75:2C:C4:DB:B4:97
Download: canokey-fido-root-ca-2.pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
| Field | Value |
|---|---|
| Subject | CN=CanoKeys FIDO Attestation Root CA No.3 |
| Serial number | 26A2ECCC509223A81F0EABC52FEBF34290D64BAE |
| Not before (UTC) | 2024-09-03 03:55:50 |
| Not after (UTC) | 2044-03-02 03:55:50 |
SHA-256 fingerprint:
95:F8:A4:63:4D:19:A1:51:32:B5:CC:4A:70:78:36:38:F7:5F:22:AC:FD:88:DD:AA:2B:CF:BE:82:9D:71:3A:CA
Download: canokey-fido-root-ca-3.pem
-----BEGIN CERTIFICATE-----
MIIBpjCCAUygAwIBAgIUJqLszFCSI6gfDqvFL+vzQpDWS64wCgYIKoZIzj0EAwIw
MTEvMC0GA1UEAwwmQ2Fub0tleXMgRklETyBBdHRlc3RhdGlvbiBSb290IENBIE5v
LjMwHhcNMjQwOTAzMDM1NTUwWhcNNDQwMzAyMDM1NTUwWjAxMS8wLQYDVQQDDCZD
YW5vS2V5cyBGSURPIEF0dGVzdGF0aW9uIFJvb3QgQ0EgTm8uMzBZMBMGByqGSM49
AgEGCCqGSM49AwEHA0IABEXEY5WDrVrndfPOhUxHo+6iMUbP9XTPkllE4lO9oG84
mw4CVoRcQ6/IGrr+zWEaPEgBmPANsdyWyeBKzoqTedajQjBAMB0GA1UdDgQWBBS6
obb0l+0czy2I17sSDcNuceE5ujAPBgNVHRMECDAGAQH/AgEAMA4GA1UdDwEB/wQE
AwIBBjAKBggqhkjOPQQDAgNIADBFAiBstCxcYRiCCyjfVuX7pllb9Tt3dji+sEd1
XoWJgWAE0gIhAJs+giTpbPvztoEMkmv3Gfrmp6zXzcalYpFwbImJbCAr
-----END CERTIFICATE-----
| Field | Value |
|---|---|
| Subject | CN=CanoKey FIDO Attestation Root CA No. 4,O=ACentauri Technology Limited,C=HK |
| Serial number | 20D50F8CDA5334F5 |
| Not before (UTC) | 2026-09-21 00:00:00 |
| Not after (UTC) | 9999-12-31 23:59:59 |
SHA-256 fingerprint:
00:D0:32:B6:48:2D:BB:35:F2:89:0B:29:C0:6E:ED:34:89:1F:F2:CA:4A:54:42:22:9B:5C:4A:5E:AE:0A:1D:3F
Download: canokey-fido-root-ca-4.pem
-----BEGIN CERTIFICATE-----
MIICBTCCAaqgAwIBAgIIINUPjNpTNPUwCgYIKoZIzj0EAwIwZTELMAkGA1UEBhMC
SEsxJTAjBgNVBAoMHEFDZW50YXVyaSBUZWNobm9sb2d5IExpbWl0ZWQxLzAtBgNV
BAMMJkNhbm9LZXkgRklETyBBdHRlc3RhdGlvbiBSb290IENBIE5vLiA0MCAXDTI2
MDkyMTAwMDAwMFoYDzk5OTkxMjMxMjM1OTU5WjBlMQswCQYDVQQGEwJISzElMCMG
A1UECgwcQUNlbnRhdXJpIFRlY2hub2xvZ3kgTGltaXRlZDEvMC0GA1UEAwwmQ2Fu
b0tleSBGSURPIEF0dGVzdGF0aW9uIFJvb3QgQ0EgTm8uIDQwWTATBgcqhkjOPQIB
BggqhkjOPQMBBwNCAAToOsVkRguXTa0xGxR42+/TpjLT/k8mP8F70i8uztb9I29E
QyIBQHt/phnVja6UcM1OwrVrYzNr63Gpz9w6L+9Co0IwQDAPBgNVHRMBAf8EBTAD
AQH/MB0GA1UdDgQWBBTsZdnpsRoc3tPqhZxcAWibe0TkajAOBgNVHQ8BAf8EBAMC
AQYwCgYIKoZIzj0EAwIDSQAwRgIhAPxmF6ox7drKpjkJUiJIJkI9GOIkEo8L3rFQ
Wtz6sTB0AiEA1nKj0H5xu6oaJ4AWPvbP0Xa3M9k/j8x89Kes8R4bw3s=
-----END CERTIFICATE-----
| Field | Value |
|---|---|
| Subject | CN=CanoKey PIV Attestation Root CA No. 1,O=ACentauri Technology Limited,C=HK |
| Serial number | 5EDABAAAB19E79A9 |
| Not before (UTC) | 2026-09-22 00:00:00 |
| Not after (UTC) | 9999-12-31 23:59:59 |
SHA-256 fingerprint:
2E:B3:82:E5:EC:23:56:61:F9:26:C2:3D:25:BA:92:22:7B:D6:B9:D5:D3:54:13:11:77:54:73:68:AB:EA:68:1C
Download: canokey-piv-root-ca-1.pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----