Where do I find SSL CA Bundle?

Note: Namecheap is offering free replacement of your current Symantec certificate to its Sectigo equivalent. Addressing the market needs and keeping our hand on pulse, we want to protect our customers. We are always here to clarify any SSL-related points and provide assistance on the way.

You don't need to pull out your hair anymore in an attempt to compile a correct CA Bundle for your certificate! We already did that for you.

If you have your certificate in the PKCS#7 format (appropriate mostly for IIS/Microsoft Exchange), you already have your bundle included into your certificate and do not need to install it separately.

In order to save the file it is necessary to right-click on it and use the 'save as' option. Otherwise, your browser may try to install it.

Keep in mind that Sectigo CA currently has several versions of the "USERTrust RSA Certification Authority" SHA-2 root certificate.

The up-to-date version is not cross-signed by any other certificate and is a self-signed SHA2 root certificate in fact. Another valid version is cross-signed by the AAA Root certificate.

Sectigo Public Server Authentication Bundle:

Domain Validation Bundles

RSA

Contains the following certificates:

DV RSA TLS Intermediate: Sectigo Public Server Authentication CA DV R36
RSA TLS Root: Sectigo Public Server Authentication Root R46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the RSA TLS Root:

(Version 1)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xUSERTrust
RSA TLS Old Root: USERTrust RSA Certification Authority

(Version 2)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xAAA
RSA TLS Old Root: AAA Certificate Services

ECC

Contains the following certificates:

DV ECC TLS Intermediate: Sectigo Public Server Authentication CA DV E36
ECC TLS Root: Sectigo Public Server Authentication Root E46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the ECC TLS Root:

(Version 1)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xUSERTrust
ECC TLS Old Root: USERTrust ECC Certification Authority

(Version 2)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xAAA
ECC TLS Old Root: AAA Certificate Services

Organization Validation Bundles

RSA

Contains the following certificates:

OV RSA TLS Intermediate: Sectigo Public Server Authentication CA OV R36
RSA TLS Root: Sectigo Public Server Authentication Root R46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the RSA TLS Root:

(Version 1)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xUSERTrust
RSA TLS Old Root: USERTrust RSA Certification Authority

(Version 2)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xAAA
RSA TLS Old Root: AAA Certificate Services

ECC

Contains the following certificates:

OV ECC TLS Intermediate: Sectigo Public Server Authentication CA OV E36
ECC TLS Root: Sectigo Public Server Authentication Root E4

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the ECC TLS Root:

(Version 1)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xUSERTrust
ECC TLS Old Root: USERTrust ECC Certification Authority

(Version 2)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xAAA
ECC TLS Old Root: AAA Certificate Services

Extended Validation Bundles

RSA

Contains the following certificates:

EV RSA TLS Intermediate: Sectigo Public Server Authentication CA EV R36
RSA TLS Root: Sectigo Public Server Authentication Root R46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the RSA TLS Root:

(Version 1)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xUSERTrust
RSA TLS Old Root: USERTrust RSA Certification Authority

(Version 2)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xAAA
RSA TLS Old Root: AAA Certificate Services

ECC

Contains the following certificates:

EV ECC TLS Intermediate: Sectigo Public Server Authentication CA EV E36
ECC TLS Root: Sectigo Public Server Authentication Root E46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the ECC TLS Root:

(Version 1)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xUSERTrust
ECC TLS Old Root: USERTrust ECC Certification Authority

(Version 2)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xAAA
ECC TLS Old Root: AAA Certificate Services

Sectigo Secure Server CA Bundle under SHA2 USERTrust Root (legacy):

Sectigo RSA Domain Validation under SHA-2 root (valid for PositiveSSL, EssentialSSL, PositiveSSL Multi-Domain, PositiveSSL Wildcard and EssentialSSL Wildcard certificates)
contains:

Sectigo RSA Organization Validation under SHA-2 root (valid for InstantSSL, InstantSSL Pro, PremiumSSL, Multi-Domain SSL, Unified Communications and PremiumSSL Wildcard certificates)
contains:

Sectigo RSA Extended Validation under SHA-2 root (valid for EV SSL and EV Multi-Domain SSL certificates)
contains:

Sectigo ECC Domain Validation under SHA-2 root (valid for PositiveSSL, EssentialSSL, PositiveSSL Multi-Domain, PositiveSSL Wildcard and EssentialSSL Wildcard certificates)
contains:

Sectigo ECC Organization Validation under SHA-2 root (valid for InstantSSL, InstantSSL Pro, PremiumSSL, Multi-Domain SSL, Unified Communications and PremiumSSL Wildcard certificates)
contains:

Sectigo ECC Extended Validation under SHA-2 root (valid for EV SSL and EV Multi-Domain SSL certificates)
contains:

Sectigo Secure Server CA Bundle under AAA Certificate Services Root (legacy):

RSA DV Bundle under AAA Root (valid for PositiveSSL, EssentialSSL, PositiveSSL Multi-Domain, PositiveSSL Wildcard and EssentialSSL Wildcard certificates)
contains:

RSA OV Bundle under AAA Root (valid for InstantSSL, InstantSSL Pro, PremiumSSL, Multi-Domain SSL, Unified Communications and PremiumSSL Wildcard certificates)
contains:

RSA EV Bundle under AAA Root (valid for EV SSL and EV Multi-Domain SSL certificates)
contains:

ECC DV Bundle under AAA Root (valid for PositiveSSL, EssentialSSL, PositiveSSL Multi-Domain, PositiveSSL Wildcard and EssentialSSL Wildcard certificates)
contains:

ECC OV Bundle under AAA Root (valid for InstantSSL, InstantSSL Pro, PremiumSSL, Multi-Domain SSL, Unified Communications and PremiumSSL Wildcard certificates)
contains:

ECC EV Bundle under AAA Root (valid for EV SSL and EV Multi-Domain SSL certificates)
contains:

Comodo SHA2 Bundle under SHA2 Root (legacy):

Associated articles

How to install SSL certificates

Updated

6/25/2025

Viewed

187858 times