Where do I find SSL CA Bundle?

You don't need to pull out your hair anymore in an attempt to compile a correct CA Bundle for your certificate! We already did that for you.

If you have your certificate in the PKCS#7 format (appropriate mostly for IIS/Microsoft Exchange), you already have your bundle included into your certificate and do not need to install it separately.

In order to save the file it is necessary to right-click on it and use the 'save as' option. Otherwise, your browser may try to install it.

We provide SSL certificates issued by SSL.com and Sectigo Certificate Authorities. Choose the corresponding CA below to download the appropriate CA bundle for your SSL certificate:

SSL.com
Sectigo

SSL.com Public Server Authentication Bundle:

Domain Validation Bundles

RSA

Contains the following certificates:

DV RSA TLS Issuing Intermediate: SSL.com TLS Issuing RSA CA R1
RSA TLS Transit Intermediate: SSL.com TLS Transit RSA CA R2
RSA TLS Root: SSL.com TLS RSA Root CA 2022

ECC

Contains the following certificates:

DV ECC TLS Issuing Intermediate: SSL.com TLS Issuing ECC CA R2
ECC TLS Transit Intermediate: SSL.com TLS Transit ECC CA R2
ECC TLS Root: SSL.com TLS ECC Root CA 2022

Organization Validation Bundles

RSA

Contains the following certificates:

OV RSA TLS Issuing Intermediate: SSL.com OV TLS Issuing RSA CA 1
OV RSA TLS Transit Intermediate: SSL.com OV TLS Transit RSA CA 1
RSA TLS Root: SSL.com TLS RSA Root CA 2022

ECC

Contains the following certificates:

OV ECC TLS Issuing Intermediate: SSL.com OV TLS Issuing ECC CA 1
OV ECC TLS Transit Intermediate: SSL.com OV TLS Transit ECC CA 1
ECC TLS Root: SSL.com TLS ECC Root CA 2022

Extended Validation Bundles

RSA

Contains the following certificates:

EV RSA TLS Issuing Intermediate: SSL.com EV TLS Issuing RSA CA R1
EV RSA TLS Transit Intermediate: SSL.com EV TLS Transit RSA CA R2
RSA TLS Root: SSL.com TLS RSA Root CA 2022

ECC

Contains the following certificates:

EV ECC TLS Issuing Intermediate: SSL.com EV TLS Issuing ECC CA R1
EV ECC TLS Transit Intermediate: SSL.com EV TLS Transit ECC CA R2
ECC TLS Root: SSL.com TLS ECC Root CA 2022

Sectigo Public Server Authentication Bundle:

Keep in mind that Sectigo CA currently has several versions of the "Sectigo Public Server Authentication Root R46" SHA-2 root certificate.
The up-to-date version is not cross-signed by any other certificate and is a self-signed SHA2 root certificate in fact. Another valid versions are cross-signed by the USERTrust RSA Certification Authority / AAA Root certificate.

Domain Validation Bundles

RSA

Contains the following certificates:

DV RSA TLS Intermediate: Sectigo Public Server Authentication CA DV R36
RSA TLS Root: Sectigo Public Server Authentication Root R46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the RSA TLS Root:

(Version 1)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xUSERTrust
RSA TLS Old Root: USERTrust RSA Certification Authority

(Version 2)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xAAA
RSA TLS Old Root: AAA Certificate Services

ECC

Contains the following certificates:

DV ECC TLS Intermediate: Sectigo Public Server Authentication CA DV E36
ECC TLS Root: Sectigo Public Server Authentication Root E46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the ECC TLS Root:

(Version 1)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xUSERTrust
ECC TLS Old Root: USERTrust ECC Certification Authority

(Version 2)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xAAA
ECC TLS Old Root: AAA Certificate Services

Organization Validation Bundles

RSA

Contains the following certificates:

OV RSA TLS Intermediate: Sectigo Public Server Authentication CA OV R36
RSA TLS Root: Sectigo Public Server Authentication Root R46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the RSA TLS Root:

(Version 1)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xUSERTrust
RSA TLS Old Root: USERTrust RSA Certification Authority

(Version 2)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xAAA
RSA TLS Old Root: AAA Certificate Services

ECC

Contains the following certificates:

OV ECC TLS Intermediate: Sectigo Public Server Authentication CA OV E36
ECC TLS Root: Sectigo Public Server Authentication Root E4

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the ECC TLS Root:

(Version 1)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xUSERTrust
ECC TLS Old Root: USERTrust ECC Certification Authority

(Version 2)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xAAA
ECC TLS Old Root: AAA Certificate Services

Extended Validation Bundles

RSA

Contains the following certificates:

EV RSA TLS Intermediate: Sectigo Public Server Authentication CA EV R36
RSA TLS Root: Sectigo Public Server Authentication Root R46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the RSA TLS Root:

(Version 1)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xUSERTrust
RSA TLS Old Root: USERTrust RSA Certification Authority

(Version 2)

RSA TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root R46xAAA
RSA TLS Old Root: AAA Certificate Services

ECC

Contains the following certificates:

EV ECC TLS Intermediate: Sectigo Public Server Authentication CA EV E36
ECC TLS Root: Sectigo Public Server Authentication Root E46

Depending on the case, you may also use one of the following versions of the signing certificates for your bundle instead of the ECC TLS Root:

(Version 1)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xUSERTrust
ECC TLS Old Root: USERTrust ECC Certification Authority

(Version 2)

ECC TLS Cross-Signed Intermediate: Sectigo Public Server Authentication Root E46xAAA
ECC TLS Old Root: AAA Certificate Services

Sectigo Secure Server CA Bundle under SHA2 USERTrust Root (legacy):

Sectigo RSA Domain Validation under SHA-2 root (valid for PositiveSSL, EssentialSSL, PositiveSSL Multi-Domain, PositiveSSL Wildcard and EssentialSSL Wildcard certificates)
contains:

Sectigo RSA Organization Validation under SHA-2 root (valid for InstantSSL, InstantSSL Pro, PremiumSSL, Multi-Domain SSL, Unified Communications and PremiumSSL Wildcard certificates)
contains:

Sectigo RSA Extended Validation under SHA-2 root (valid for EV SSL and EV Multi-Domain SSL certificates)
contains:

Sectigo ECC Domain Validation under SHA-2 root (valid for PositiveSSL, EssentialSSL, PositiveSSL Multi-Domain, PositiveSSL Wildcard and EssentialSSL Wildcard certificates)
contains:

Sectigo ECC Organization Validation under SHA-2 root (valid for InstantSSL, InstantSSL Pro, PremiumSSL, Multi-Domain SSL, Unified Communications and PremiumSSL Wildcard certificates)
contains:

Sectigo ECC Extended Validation under SHA-2 root (valid for EV SSL and EV Multi-Domain SSL certificates)
contains:

Sectigo Secure Server CA Bundle under AAA Certificate Services Root (legacy):

RSA DV Bundle under AAA Root (valid for PositiveSSL, EssentialSSL, PositiveSSL Multi-Domain, PositiveSSL Wildcard and EssentialSSL Wildcard certificates)
contains:

RSA OV Bundle under AAA Root (valid for InstantSSL, InstantSSL Pro, PremiumSSL, Multi-Domain SSL, Unified Communications and PremiumSSL Wildcard certificates)
contains:

RSA EV Bundle under AAA Root (valid for EV SSL and EV Multi-Domain SSL certificates)
contains:

ECC DV Bundle under AAA Root (valid for PositiveSSL, EssentialSSL, PositiveSSL Multi-Domain, PositiveSSL Wildcard and EssentialSSL Wildcard certificates)
contains:

ECC OV Bundle under AAA Root (valid for InstantSSL, InstantSSL Pro, PremiumSSL, Multi-Domain SSL, Unified Communications and PremiumSSL Wildcard certificates)
contains:

ECC EV Bundle under AAA Root (valid for EV SSL and EV Multi-Domain SSL certificates)
contains:

Comodo SHA2 Bundle under SHA2 Root (legacy):

Associated articles

How to install SSL certificates

Updated

7/9/2026

Viewed

204971 times