This webpage contains the certificates of the German Country Signing Certificate Authority (CSCA) that is operated for testing purposes by the Federal Office for Information Security (BSI).

Current CSCA test certificate (09/21)

The current public key is available as a self-signed certificate and as a link certificate that can be verified by the preceding public key.

The public key has the following SHA-1 fingerprint
E4 F9 34 EE 5E D9 8D 61 C3 F2 EF 1A 49 F2 90 80 1D 08 FB B9

The self-signed test-CSCA-certificate has the following SHA-256 fingerprint
E1 7A 1A 71 DD 24 28 D6 CD 73 09 96 31 26 98 91 B4 2B 73 E5 73 2C 31 EE 04 28 C1 62 54 34 A2 0E

The test-CSCA-link-certificate has the following SHA-256 fingerprint
8B D6 6C 54 04 B3 50 44 79 85 65 B5 F2 B5 42 36 84 47 BA B1 92 8D FD 72 61 AE 75 05 F3 ED 40 C0

All currently valid test CSCA certificates

The complete chain of all test CSCA certificates, starting with the oldest test CSCA certificate, can be downloaded here in a ZIP file. The individual certificates and all the corresponding SHA-256 fingerprints are listed below.

Preceding test CSCA certificates

Certificate 12/2018

The public key has the following SHA-1 fingerprint:
53:9D:B1:87:2A:AC:91:93:D7:63:92:EE:80:D9:E5:99:6C:F9:9B:3B

The self-signed test CSCA certificate has the following SHA-256 fingerprint:
7B8E 343C 5B52 25B2 B2CD CBA9 5EE4 053F 9E2C 7261 96E2 B326 7F8E EADD ABD3 3F2B

The test CSCA link certificate has the following SHA-256 fingerprint:
C6E4 F746 5C38 F7EB A68C 1EFE 0030 20E3 F289 2723 3DD5 5C72 9B6A D435 265B 436E

Certificate 08/2016

The public key has the relative distinguished name SN=0006 and the following SHA-1 fingerprint:
1C:0D:35:C5:7F:D4:03:A9:7E:A0:9E:5F:61:00:FD:C3:08:25:B1:2F

The self-signed test CSCA certificate has the following SHA-256 fingerprint:
1099 3522 6BA8 E75C 67D3 4B6F CB07 F0D4 CC68 56D9 056E 7A20 138D 93A8 D12D FC29

The test CSCA link certificate has the following SHA-256 fingerprint:
204B 8236 CDCB 9A36 8F41 8335 44FE D694 E294 EB63 D01A BB9A 465F 34EF 1F81 F886

Certificate 09/2015

The public key has the relative distinguished name SN=0004 and the following SHA-1 fingerprint:
70:FC:3C:D7:5F:CC:69:0B:74:8E:D8:A4:66:E6:B0:5B:CF:DD:39:9D

The self-signed test CSCA certificate has the following SHA-256 fingerprint:
35ED F9D0 FE79 D2A7 7CAD 1845 FBA5 1DB7 B85E 763F 9820 8C80 7CC9 7F09 5422 8868

The test CSCA link certificate has the following SHA-256 fingerprint:
134D F8C4 9EA0 0FD8 2260 53D8 22F5 C4F8 E8F3 2674 3519 0372 2E1B 5824 6D4C 5D1A

Certificate 10/2012

The public key has the relative distinguished name SN=0003 and the following SHA-1 fingerprint:
A3:8D:B7:C0:DB:EC:F5:A9:1F:CA:6B:3D:5E:B2:F3:28:B5:A5:DC:17

The self-signed test CSCA certificate has the following SHA-256 fingerprint:
8D98 6F86 919F 0A15 5BBF 9CB5 8B3E 9DE0 2CB1 C438 D683 F484 7F50 01A2 CEA2 8250

The test CSCA link certificate has the following SHA-256 fingerprint:
80A8 5622 FD47 8F64 2FFB 1377 EBC6 1243 F7E0 93E2 EAD7 E13A 1AC2 A6AC 0632 7E61

Certificate 01/2011

The public key has the relative distinguished name SN=0001 and the following SHA-1 fingerprint:
29:F3:F2:CF:A3:3B:0B:03:B7:69:D6:2C:13:0D:C0:A0:1E:79:F9:8F

The self-signed test CSCA certificate has the following SHA-256 fingerprint:
003B C3D4 3520 D71B 0832 DBA4 6B3C C56A D761 5766 01E3 A4A2 ADBF B41C 2196 7492