Certificate Policies and Certification Practice Statements

CP and CPS documents are available on a separate page.

Certificates

Root CAs

• Cisco Root CA 2048 (crca2048) - CER
• Cisco Root CA 2048 (crca2048) - PEM
• Cisco Root CA 2099 (crca2099) - CER
• Cisco Root CA 2099 (crca2099) - PEM
• Cisco ECC Root CA (rx-e2) - CER
• Cisco ECC Root CA (rx-e2) - PEM
• Cisco RXC-R2 (rxc-r2) - CER
• Cisco RXC-R2 (rxc-r2) - PEM
• Test Root CA 2048 - CER
• Test Root CA 2048 - PEM
• Cisco Root CA M1 (crcam1) - CER
• Cisco Root CA M1 (crcam1) - PEM
• Cisco Root CA M2 (crcam2) - CER
• Cisco Root CA M2 (crcam2) - PEM
• Cisco Umbrella Root CA - CER
• Cisco Umbrella Root CA - PEM
• Cisco Basic Assurance Root CA 2099 (cbarc2099) - CER
• Cisco Basic Assurance Root CA 2099 (cbarc2099) - PEM
• Cisco Virtual UEFI Root CA (vuefirca) - CER
• Cisco Virtual UEFI Root CA (vuefirca) - PEM
• Cisco Virtual UEFI Root CA V2 (vuefircav2) - CER
• Cisco Virtual UEFI Root CA V2 (vuefircav2) - PEM
• Virtual Office Root CA (vorca) - CER
• Virtual Office Root CA (vorca) - PEM
• IT Application Root CA (itarca) - CER
• IT Application Root CA (itarca) - PEM
• Strong Authentication Root CA (sarca) - CER
• Strong Authentication Root CA (sarca) - PEM
• Cisco Root CA RSA4K 2099 (crca2099r4k) - CER
• Cisco Root CA RSA4K 2099 (crca2099r4k) - PEM
• Cisco Software Identity Root CA RSA 4096 SHA512 2099 (csirca4096) - CER
• Cisco Software Identity Root CA RSA 4096 SHA512 2099 (csirca4096) - PEM
• Cisco Software Identity Root CA EC P384 SHA384 2099 (csircap384) - CER
• Cisco Software Identity Root CA EC P384 SHA384 2099 (csircap384) - PEM
• Meraki Manufacturing Root CA (mmrca) - CER
• Meraki Manufacturing Root CA (mmrca) - PEM
• Cisco Secure Access China Custom Root CA (csaccrca) - CER
• Cisco Secure Access China Custom Root CA (csaccrca) - PEM
• Cisco Secure Access China Root CA (csacrca) - CER
• Cisco Secure Access China Root CA (csacrca) - PEM
• F9 PKI Cisco Secure Access China Root CA (fpcsacrca) - CER
• F9 PKI Cisco Secure Access China Root CA (fpcsacrca) - PEM

Subordinated CAs

• Cisco Manufacturing CA (cmca) - CER
• Cisco Manufacturing CA (cmca) - PEM
• Cisco Manufacturing CA (cmca2) - CER
• Cisco Manufacturing CA (cmca2) - PEM
• Cisco XSSL-R2 (xssl-r2) - CER
• Cisco XSSL-R2 (xssl-r2) - PEM
• ACT2 SUDI CA - CER
• ACT2 SUDI CA - PEM
• ACT2 ECC SUDI CA - CER
• ACT2 ECC SUDI CA - PEM
• Cisco Client CA 001 (aca) - CER
• Cisco Client CA 001 (aca) - PEM
• Airespace - CER
• Airespace -PEM
• HA SUDI CA - CER
• HA SUDI CA - PEM
• Attestation CA - CER
• Attestation CA - PEM
• Innerspace CA SHA-256 - CER
• Innerspace CA SHA-512 - CER
• Cisco Employee CA (ceca) - CER
• Cisco Employee CA (ceca) - PEM
• Cisco Manufacturing CA III (cmca3) - CER
• Cisco Manufacturing CA III (cmca3) - PEM
• Cisco Virtual UEFI SubCA (vuefisca) - CER
• Cisco Virtual UEFI SubCA (vuefisca) - PEM
• Cisco Virtual UEFI SubCA V2 (vuefiscav2) - CER
• Cisco Virtual UEFI SubCA V2 (vuefiscav2) - PEM
• Cisco Virtual UEFI SubCA V3 (vuefiscav3) - CER
• Cisco Virtual UEFI SubCA V3 (vuefiscav3) - PEM
• Kafka CA (kca) - CER
• Kafka CA (kca) - PEM
• HRA CA (hraca) - CER
• HRA CA (hraca) - PEM
• Strong User Authentication SubCA (suasca) - CER
• Strong User Authentication SubCA (suasca) - PEM
• Cisco Software Transparency SubCA (cswtsca) - CER
• Cisco Software Transparency SubCA (cswtsca) - PEM
• Cisco Generic Software Identity Sub CA RSA 4096 SHA512 2099 (cgsisca4096) - CER
• Cisco Generic Software Identity Sub CA RSA 4096 SHA512 2099 (cgsisca4096) - PEM
• Cisco Generic Software Identity Sub CA EC P384 SHA384 2099 (cgsiscap384) - CER
• Cisco Generic Software Identity Sub CA EC P384 SHA384 2099 (cgsiscap384) - PEM
• Cisco IOSXE Software Identity Sub CA EC P384 SHA384 2099 (cisiscap384) - CER
• Cisco IOSXE Software Identity Sub CA EC P384 SHA384 2099 (cisiscap384) - PEM
• Meraki Manufacturing Token CA (mmtca) - CER
• Meraki Manufacturing Token CA (mmtca) - PEM
• EC P384 Attestation CA (p384aca) - CER
• EC P384 Attestation CA (p384aca) - PEM

Decommissioned CAs

• SSL CA (ssca) - CER
• SSL CA (ssca) - PEM
• SSL CA (ssca2) - CER
• SSL CA (ssca2) - PEM
• SSL CA (ssca3) - CER
• SSL CA (ssca3) - PEM
• Old Airespace - CER
• Old Airespace - PEM

Certificate Revocation Lists (CRLs)

Root CAs

• Cisco Root CA 2048 (crca2048)
• Cisco Root CA 2099 (crca2099)
• Cisco ECC Root CA (rx-e2)
• Cisco RXC-R2 (rxc-r2)
• Test Root CA 2048
• Cisco Root CA M1 (crcam1)
• Cisco Root CA M2 (crcam2)
• Cisco Umbrella Root CA
• Cisco Basic Assurance Root CA 2099 (cbarc2099)
• Cisco Virtual UEFI Root CA (vuefirca)
• Virtual Office Root CA (vorca)
• IT Application Root CA (itarca)
• Strong Authentication Root CA (sarca)
• Cisco Root CA RSA4K 2099 (crca2099r4k)
• Cisco Software Identity Root CA EC P384 SHA384 2099 (csircap384)
• Cisco Software Identity Root CA RSA 4096 SHA512 2099 (csirca4096)
• Meraki Manufacturing Root CA (mmrca)
• Cisco Secure Access China Custom Root CA (csaccrca)
• Cisco Secure Access China Root CA (csacrca)
• F9 PKI Cisco Secure Access China Root CA (fpcsacrca)

Subordinated CAs

• Cisco Manufacturing CA (cmca)
• Cisco Manufacturing CA (cmca2)
• Cisco XSSL-R2 (xssl-r2)
• ACT2 SUDI CA
• ACT2 ECC SUDI CA
• Cisco Client CA 001 (aca)
• Airespace

Decommissioned CAs

• SSL CA (ssca)
• SSL CA 2 (ssca2)
• SSL CA 3 (ssca3)
• Old Airespace

Trusted Root Stores

• Cisco Trusted External Root Bundle - SHA256 checksum
• Cisco Trusted Union Root Bundle - SHA256 checksum
• Cisco Trusted Core Root Bundle - SHA256 checksum
• Cisco Trusted FedRAMP Root Bundle - SHA256 checksum

Code Signing Certificate Issuers

The list of Third Party Code Signing Certificate Issuers used by Cisco, for signing Cisco software, is available on the Cisco Code Signing Certificate Issuers page.