Certificate Policies and Certification Practice Statements
CP and CPS documents are available on a separate page.
Certificates
Root CAs
- Cisco Root CA 2048 (crca2048) - CER
- Cisco Root CA 2048 (crca2048) - PEM
- Cisco Root CA 2099 (crca2099) - CER
- Cisco Root CA 2099 (crca2099) - PEM
- Cisco ECC Root CA (rx-e2) - CER
- Cisco ECC Root CA (rx-e2) - PEM
- Cisco RXC-R2 (rxc-r2) - CER
- Cisco RXC-R2 (rxc-r2) - PEM
- Test Root CA 2048 - CER
- Test Root CA 2048 - PEM
- Cisco Root CA M1 (crcam1) - CER
- Cisco Root CA M1 (crcam1) - PEM
- Cisco Root CA M2 (crcam2) - CER
- Cisco Root CA M2 (crcam2) - PEM
- Cisco Umbrella Root CA - CER
- Cisco Umbrella Root CA - PEM
- Cisco Basic Assurance Root CA 2099 (cbarc2099) - CER
- Cisco Basic Assurance Root CA 2099 (cbarc2099) - PEM
- Cisco Virtual UEFI Root CA (vuefirca) - CER
- Cisco Virtual UEFI Root CA (vuefirca) - PEM
- Cisco Virtual UEFI Root CA V2 (vuefircav2) - CER
- Cisco Virtual UEFI Root CA V2 (vuefircav2) - PEM
- Virtual Office Root CA (vorca) - CER
- Virtual Office Root CA (vorca) - PEM
- IT Application Root CA (itarca) - CER
- IT Application Root CA (itarca) - PEM
- Strong Authentication Root CA (sarca) - CER
- Strong Authentication Root CA (sarca) - PEM
- Cisco Root CA RSA4K 2099 (crca2099r4k) - CER
- Cisco Root CA RSA4K 2099 (crca2099r4k) - PEM
- Cisco Software Identity Root CA RSA 4096 SHA512 2099 (csirca4096) - CER
- Cisco Software Identity Root CA RSA 4096 SHA512 2099 (csirca4096) - PEM
- Cisco Software Identity Root CA EC P384 SHA384 2099 (csircap384) - CER
- Cisco Software Identity Root CA EC P384 SHA384 2099 (csircap384) - PEM
- Meraki Manufacturing Root CA (mmrca) - CER
- Meraki Manufacturing Root CA (mmrca) - PEM
- Cisco Secure Access China Custom Root CA (csaccrca) - CER
- Cisco Secure Access China Custom Root CA (csaccrca) - PEM
- Cisco Secure Access China Root CA (csacrca) - CER
- Cisco Secure Access China Root CA (csacrca) - PEM
- F9 PKI Cisco Secure Access China Root CA (fpcsacrca) - CER
- F9 PKI Cisco Secure Access China Root CA (fpcsacrca) - PEM
- Cisco Secure Access China Custom Production Root CA (csaccprca) - CER
- Cisco Secure Access China Custom Production Root CA (csaccprca) - PEM
- Cisco Secure Access China Production Root CA (csacprca) - CER
- Cisco Secure Access China Production Root CA (csacprca) - PEM
- F9 PKI Cisco Secure Access China Production Root CA (fpcsacprca) - CER
- F9 PKI Cisco Secure Access China Production Root CA (fpcsacprca) - PEM
- TRS Bundle Root CA (tbrca) - CER
- TRS Bundle Root CA (tbrca) - PEM
Subordinated CAs
- Cisco Manufacturing CA (cmca) - CER
- Cisco Manufacturing CA (cmca) - PEM
- Cisco Manufacturing CA (cmca2) - CER
- Cisco Manufacturing CA (cmca2) - PEM
- Cisco XSSL-R2 (xssl-r2) - CER
- Cisco XSSL-R2 (xssl-r2) - PEM
- ACT2 SUDI CA - CER
- ACT2 SUDI CA - PEM
- ACT2 ECC SUDI CA - CER
- ACT2 ECC SUDI CA - PEM
- Cisco Client CA 001 (aca) - CER
- Cisco Client CA 001 (aca) - PEM
- Airespace - CER
- Airespace -PEM
- HA SUDI CA - CER
- HA SUDI CA - PEM
- Attestation CA - CER
- Attestation CA - PEM
- Innerspace CA SHA-256 - CER
- Innerspace CA SHA-512 - CER
- Cisco Employee CA (ceca) - CER
- Cisco Employee CA (ceca) - PEM
- Cisco Manufacturing CA III (cmca3) - CER
- Cisco Manufacturing CA III (cmca3) - PEM
- Cisco Virtual UEFI SubCA (vuefisca) - CER
- Cisco Virtual UEFI SubCA (vuefisca) - PEM
- Cisco Virtual UEFI SubCA V2 (vuefiscav2) - CER
- Cisco Virtual UEFI SubCA V2 (vuefiscav2) - PEM
- Cisco Virtual UEFI SubCA V3 (vuefiscav3) - CER
- Cisco Virtual UEFI SubCA V3 (vuefiscav3) - PEM
- Kafka CA (kca) - CER
- Kafka CA (kca) - PEM
- HRA CA (hraca) - CER
- HRA CA (hraca) - PEM
- Strong User Authentication SubCA (suasca) - CER
- Strong User Authentication SubCA (suasca) - PEM
- Cisco Software Transparency SubCA (cswtsca) - CER
- Cisco Software Transparency SubCA (cswtsca) - PEM
- Cisco Generic Software Identity Sub CA RSA 4096 SHA512 2099 (cgsisca4096) - CER
- Cisco Generic Software Identity Sub CA RSA 4096 SHA512 2099 (cgsisca4096) - PEM
- Cisco Generic Software Identity Sub CA EC P384 SHA384 2099 (cgsiscap384) - CER
- Cisco Generic Software Identity Sub CA EC P384 SHA384 2099 (cgsiscap384) - PEM
- Cisco IOSXE Software Identity Sub CA EC P384 SHA384 2099 (cisiscap384) - CER
- Cisco IOSXE Software Identity Sub CA EC P384 SHA384 2099 (cisiscap384) - PEM
- Meraki Manufacturing Token CA (mmtca) - CER
- Meraki Manufacturing Token CA (mmtca) - PEM
- EC P384 Attestation CA (p384aca) - CER
- EC P384 Attestation CA (p384aca) - PEM
- TRS Bundle SubCA (tbsca) - CER
- TRS Bundle SubCA (tbsca) - PEM
Decommissioned CAs
Certificate Revocation Lists (CRLs)
Root CAs
- Cisco Root CA 2048 (crca2048)
- Cisco Root CA 2099 (crca2099)
- Cisco ECC Root CA (rx-e2)
- Cisco RXC-R2 (rxc-r2)
- Test Root CA 2048
- Cisco Root CA M1 (crcam1)
- Cisco Root CA M2 (crcam2)
- Cisco Umbrella Root CA
- Cisco Basic Assurance Root CA 2099 (cbarc2099)
- Cisco Virtual UEFI Root CA (vuefirca)
- Virtual Office Root CA (vorca)
- IT Application Root CA (itarca)
- Strong Authentication Root CA (sarca)
- Cisco Root CA RSA4K 2099 (crca2099r4k)
- Cisco Software Identity Root CA EC P384 SHA384 2099 (csircap384)
- Cisco Software Identity Root CA RSA 4096 SHA512 2099 (csirca4096)
- Meraki Manufacturing Root CA (mmrca)
- Cisco Secure Access China Custom Root CA (csaccrca)
- Cisco Secure Access China Root CA (csacrca)
- F9 PKI Cisco Secure Access China Root CA (fpcsacrca)
- Cisco Secure Access China Custom Production Root CA (csaccprca)
- Cisco Secure Access China Production Root CA (csacprca)
- F9 PKI Cisco Secure Access China Production Root CA (fpcsacprca)
- TRS Bundle Root CA (tbrca)
Subordinated CAs
- Cisco Manufacturing CA (cmca)
- Cisco Manufacturing CA (cmca2)
- Cisco XSSL-R2 (xssl-r2)
- ACT2 SUDI CA
- ACT2 ECC SUDI CA
- Cisco Client CA 001 (aca)
- Airespace
Decommissioned CAs
Trusted Root Stores
Code Signing Certificate Issuers
The list of Third Party Code Signing Certificate Issuers used by Cisco, for signing Cisco software, is available on the Cisco Code Signing Certificate Issuers page.