Note:

Sorry, we are still working on the translation of our website. Some information is currently only available in German.

Intermediate Certificates

In the Telekom Security Trust Center and under the Root Certificates, we are also managing different certification authorities for end-entity certificates. Additionally, we also issue Intermediate Certificates for other operators of certification authorities.

Here you can find detailed information about the Intermediate Certificates of Deutsche Telekom Security GmbH.

Intermediate Certificates for public Certificates

Deutsche Telekom AG secure email CA E03
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2020-07-09 to 2030-07-09
Serial number: 39EC6CFC261ACFBE898FA145705C9B0A
Fingerprint (SHA1): 75C18D78FD56D2ED539F8B000E5D6C8B697E5BEE
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_secure_email_CA_E03.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom AG secure email CA E02
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2020-02-25 to 2030-02-25
Serial number: 34d22925006c85582fe89b82d7976d59
Fingerprint (SHA1): 7bc0048a1fd8f4238cccc9cc566dd38bff7e67e2
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_secure_email_CA_E02.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom AG secure email CA
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2019-04-09 to 2029-04-09
Serial number: 1531b1a1347c85a97a37f60ebb50fd86
Fingerprint (SHA1): 34cb18d40de29fae82dba925bae7c602c0833a2e
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_secure_email_CA.crl

Product/Solution: cPKI

Download Certificate
TeleSec PKS CA 8
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | ECC | P-256
Validity period: 2019-03-20 to 2020-08-20 (revoked)
Serial number: 341b47752b0fe27ce864557691f29a44
Fingerprint (SHA1): fafcdf0c99748ca165cce966709ee655b268e6b1
Certificate revocation list (CRL)TeleSec_PKS_CA_8.crl

Product/Solution: PKS

Download Certificate
Deutsche Telekom AG secure email CA 2
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2018-01-18 to 2028-01-18
Serial number: 7581aa9f9830a3abbf5bb69f84d856
Fingerprint (SHA1): 0a0f64eaf722fc7c9b348bb5092dce9e74279973
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_secure_email_CA.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom AG Issuing CA 01
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2016-07-13 to 2026-07-13
Serial number: 00eedb860e523b2e43
Fingerprint (SHA1): 0b7671e1e668a52829f8a4ef677f46225c9ce446
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_Issuing_CA_01.crl

Product/Solution: cPKI

Download Certificate
TeleSec PKS CA 7
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2016-07-09 to 2019-07-09 (invalid)
Serial number: 00b6980167
Fingerprint (SHA1): fd61125dce236d8976c966235956858c69a4dc5f

Product/Solution: PKS

Download Certificate
DFN-Verein Certification Authority 2
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2016-02-22 to 2031-02-22
Serial number: 00 E3 0B D5 F8 AF 25 D9 81
Fingerprint (SHA1): E224BEF6D786220D262BB807AB6DACF9D3A89A93
Certificate revocation list (CRL)http://cdp1.pca.dfn.de/global-root-g2-ca/pub/crl/cacrl.crl

Product/Solution: DFN (Deutsches Forschungsnetz)

Download Certificate
TeleSec ServerPass CA 2
Issuer: Baltimore CyberTrust Root

SHA256 | RSA | 2048
Validity period: 2014-07-09 to 2020-03-25 (revoked)
Serial number: 0727B216
Fingerprint (SHA1): 35278096CEAA39E5A6887C8F19E604FCB7FD5B21
Certificate revocation list (CRL)CRL-TeleSec_ServerPass_CA_2.crl

Product/Solution: ServerPass

Download Certificate
TeleSec ServerPass Class 2 CA
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2014-02-11 to 2024-02-11
Serial number: 7e39c7ad1dd9f043
Fingerprint (SHA1): 7bc0048a1fd8f4238cccc9cc566dd38bff7e67e2
Certificate revocation list (CRL)http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl

Product/Solution: ServerPass

Download Certificate
TeleSec ServerPass Extended Validation Class 3 CA
Issuer: T-TeleSec GlobalRoot Class 3

SHA256 | RSA | 2048
Validity period: 2014-02-11 to 2024-02-11
Serial number: 174d2ca6d6323c0e
Fingerprint (SHA1): c6d43f5978e02e1fc64cf6fa94ac4b4d3adc8593
Certificate revocation list (CRL)http://crl.serverpass.telesec.de/rl/ServerPass_EV_Class_3.crl

Product/Solution: ServerPass

Download Certificate
TeleSec Business CA 1
Issuer: T-TeleSec GlobalRoot Class 2

SHA256 | RSA | 2048
Validity period: 2012-11-29 to 2024-11-29
Serial number: 488d025dd6f4
Fingerprint (SHA1): 57a8c5b5260e206353d4c346e3f60939e4f8b859
Certificate revocation list (CRL): http://crl.sbca.telesec.de/rl/TeleSec_Business_CA_1.crl

Product/Solution: Shared Business CA

Download Certificate

Intermediate Certificates for qualified Certificates

TeleSec PKS eIDAS QES CA 5
Issuer: TeleSec qualified Root CA 1

SHA512 | ECC | P-256
Validity period: 2019-12-03 to 2034-12-03
Serial number: 0085046462173588b6
Fingerprint (SHA1): 55516fc09ebb22bc4f1b50cb6abf5735d20e49e2

Product/Solution: PKS

Download Certificate
TeleSec PKS eIDAS QES CA 6
Issuer: TeleSec qualified Root CA 1

SHA512 | ECC | P-256
Validity period: 2019-12-03 to 2034-12-03
Serial number: 2bb73eb776fb8d65
Fingerprint (SHA1): e04f320f5efc42dfb175267c13da51408350aeab

Product/Solution: PKS

Download Certificate
TeleSec PKS eIDAS QES CA 2
Issuer: TeleSec qualified Root CA 1

SHA512 | ECC | P-256
Validity period: 2017-10-09 to 2032-10-09
Serial number: 00b35007958a56d225
Fingerprint (SHA1): f37c51a639401c265483ad63b4c972ca6301ccb1

Product/Solution: PKS

Download Certificate
TeleSec PKS eIDAS QES CA 3
Issuer: TeleSec qualified Root CA 1

SHA512 | ECC | P-256
Validity period: 2017-10-09 to 2032-10-09
Serial number: 4cb7d95d06b7832f
Fingerprint (SHA1): ee6e12676d7da35c32677dc5139fffa386fca824

Product/Solution: PKS

Download Certificate
TeleSec PKS eIDAS QES CA 4
Issuer: TeleSec qualified Root CA 1

SHA512 | ECC | P-256
Validity period: 2017-10-09 to 2032-10-09
Serial number: 4d0560f13ec78449
Fingerprint (SHA1): 7a84bce66a676864aceb0c98995bc8fd3be1114c

Product/Solution: PKS

Download Certificate
TSYSI.HBA-qCA6
Issuer: TeleSec qualified Root CA 1

SHA512 | RSA| 2048
Validity period: 2017-06-12 to 2022-12-31
Serial number: 47d47ca21c24ee1a
Fingerprint (SHA1): 71c2f3509950736bc61b2ba49e61b7a0c8566445
Certificate revocation list (CRL)http://crl.hba.telesec.de/rl/TSYSI.HBA-qCA6.crl

Product/Solution: HBA SMC-B

Download Certificate
TeleSec PKS eIDAS QES CA 1
Issuer: TeleSec qualified Root CA 1

SHA512 | ECC| brainpoolP256r1
Validity period: 2017-05-03 to 2032-05-03
Serial number: 00dbcd76bd50f970f5
Fingerprint (SHA1): 24ae52bdd0ceefad51992344b08376108270d123

Product/Solution: PKS

Download Certificate
TSYSI.HBA-qCA5
Issuer: TeleSec qualified Root CA 1

SHA512 | RSA| 2048
Validity period: 2017-05-03 to 2025-05-03
Serial number: 00de8d6eb8e63c7257
Fingerprint (SHA1): 59127636c64fe665d4404c17e8c4cda7b590c1a8
Certificate revocation list (CRL)http://crl.hba.telesec.de/rl/TSYSI.HBA-qCA5.crl

Product/Solution: HBA SMC-B

Download Certificate
TeleSec ServerPass Extended Validation Class 3 CA
Issuer: T-TeleSec GlobalRoot Class 3

SHA256 | RSA | 2048
Validity period: 2014-02-11 to 2024-02-11
Serial number: 174d2ca6d6323c0e
Fingerprint (SHA1): c6d43f5978e02e1fc64cf6fa94ac4b4d3adc8593
Certificate revocation list (CRL)http://crl.serverpass.telesec.de/rl/ServerPass_EV_Class_3.crl

Product/Solution: ServerPass (QCP-w, eIDAS)

Download Certificate

Intermediate Certificates for internal and private Certificates

Deutsche Telekom AG infrastructure CA
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Validity period: 2020-12-01 to 2030-12-01
Serial number: 18797af7771021c6298ad57c3d102599
Fingerprint (SHA1): 6bca233e2ba0ceccfe26097bdbc18645a854ee21
Certificate revocation list (CRL)http://crl-cpki.telekom.de/rl/Deutsche_Telekom_AG_infrastructure_CA.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom AG internal secure email CA
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Validity period: 2020-02-25 to 2030-02-25
Serial number: 1ad227861f13504b2a329452e63b5d
Fingerprint (SHA1): 767d353d5a629a16a25226bacf99fa4dc475da7f
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_internal_secure_email_CA.crl

Product/Solution: cPKI

Download Certificate
Internal Business CA 5
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Validity period: 2019-09-10 to 2031-09-10
Serial number: 12bba7db06ab3e8f44a5d694510e034a
Fingerprint (SHA1): cc78ef3c348938df057b1d1f4f9ab67eae3cb168
Certificate revocation list (CRL)http://crl.sbca.telesec.de/rl/Internal_Business_CA_5.crl

Product/Solution: Shared Business CA

Download Certificate
Deutsche Telekom AG mobile device CA
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Validity period: 2019-04-09 to 2029-04-09
Serial number: 00f7750a89a844a78e7ac0f02a6cf67b
Fingerprint (SHA1): 0b904979272abb87c3521b5a748d83cb7a79fb91
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_mobile_device_CA.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom AG virtual logon CA
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Gültigkeitszeitraum: 2019-03-19 bis 2029-03-19
Serial number: 2c92ceb17fdd7b3fa30f2274b6b59781
Fingerprint (SHA1): 922b5d5581b2a0b7f8b7050b0a2f780321c92d60
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_virtual_logon_CA.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom AG authentication CA
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Validity period: 2018-06-08 to 2028-06-08
Serial number: 5aae9e1c015134990a06616cce2835
Fingerprint (SHA1): 3d0ae29b922557b6e4d8ee83b85a7cf93b6a41fd
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_authentication_CA.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom AG infrastructure CA
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Validity period: 2018-06-08 to 2028-06-08
Serial number: 6597d217369783bf8709b01d6306c8
Fingerprint (SHA1): 5eda75d3d620fa463d0c5720b2f42253cfb62951
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_infrastructure_CA.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom AG mobile device CA
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Validity period: 2018-01-18 to 2028-01-18
Serial number: 3d819d06774d41aba1416e78016dbd
Fingerprint (SHA1): 016babf75f5698d096a3e01361d166d920df5f1f
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_mobile_device_CA.crl

Product/Solution: cPKI

Download Certificate
Internal Business CA 3
Issuer: Deutsche Telekom Internal Root CA 2

SHA256 | RSA | 2048
Validity period: 2017-08-03 to 2029-08-03
Serial number: 00b845ac949c739796
Fingerprint (SHA1): eefa1259cad493a3c804a32fac1859b4310ce518
Certificate revocation list (CRL)http://crl.sbca.telesec.de/rl/Internal_Business_CA_3.crl

Product/Solution: Shared Business CA

Download Certificate
Deutsche Telekom Issuing CA 02
Issuer: Deutsche Telekom Internal Root CA 1

SHA256 | RSA | 2048
Validity period: 2016-11-29 to 2026-11-29
Serial number: 56007b1cccc97790
Fingerprint (SHA1): aa12854eeb5fad13c618e0818bcd06983449d3b7
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_Issuing_CA_02.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom Issuing CA 02
Issuer: Deutsche Telekom Internal Root CA 1

SHA1 | RSA | 2048
Validity period: 2016-07-13 to 2026-07-13
Serial number: 1af4ac43557a5537
Fingerprint (SHA1): 66e6d50980927f224e2cfa92e56dfb82521d7a64
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_Issuing_CA_02.crl

Product/Solution: cPKI

Download Certificate
Deutsche Telekom Issuing CA 03
Issuer: Deutsche Telekom Internal Root CA 1

SHA256 | RSA | 2048
Validity period: 2016-07-13 to 2026-07-13
Serial number: 25f1851fd32a64ed
Fingerprint (SHA1): a48245cd460c9a9eb1485d803d18d02ff7f894a8
Certificate revocation list (CRL)http://cpki.telekom.de/rl/Deutsche_Telekom_AG_Issuing_CA_03.crl

Product/Solution: cPKI

Download Certificate
Internal Business CA 2
Issuer: Deutsche Telekom Internal Root CA 1

SHA256 | RSA | 2048
Validity period: 2014-02-11 to 2027-11-15
Serial number: 47a215a72ec31d31
Fingerprint (SHA1): 6819961dd2591016b7ece0c66f2b0478087f1144
Certificate revocation list (CRL)http://crl.sbca.telesec.de/rl/Internal_Business_CA_2.crl

Product/Solution: Shared Business CA

Download Certificate
Business CA
Issuer: Deutsche Telekom Internal Root CA 1

SHA1 | RSA | 2048
Validity period: 2011-11-08 to 2023-11-08
Serial number: 09
Fingerprint (SHA1): 8b521b55f0be1c7950caa5d4af3706a260b63550
Certificate revocation list (CRL)http://crl.sbca.telesec.de/rl/Business_CA.crl

Product/Solution: Shared Business CA

Download Certificate
Deutsche Telekom Issuing CA 03
Issuer: Deutsche Telekom Internal Root CA 1

SHA1 | RSA | 2048
Validity period: 2010-01-14 to 2026-01-14
Serial number: 07
Fingerprint (SHA1): 97921a0ae247945213164075e1281f38262d1182
Certificate revocation list (CRL)http://cpki.telekom.de/cdp/Deutsche Telekom AG Issuing CA 03.crl

Product/Solution: cPKI

Download Certificate

Intermediate Certificate for De-Mail

T-Systems De-Mail CA 1
Issuer: Deutsche Telekom De-Mail Root CA 1

SHA256 | RSA | 2048
Validity period: 2011-09-14 to 2031-09-14
Serial number: 02
Fingerprint (SHA1): 1535172c5bb0ba30da0345b77c0ebfad14ecbdc9

Product/Solution: De-Mail

Download Certificate

Intermediate Certificates under external Root

TSYSI.HBA-CA2
Issuer: GEM.RCA2
SHA256 | RSA | 2048
Validity period: 2018-12-03 to 2026-12-01
Serial number: 11
Fingerprint (SHA1): eeec4ee8c314e31bab0756b658ee2cdf6f2d6021
Certificate revocation list (CRL): http://crl.hba.telesec.de/rl/TSYSI.HBA-CA2.crl

Product/Solution: HBA SMC-B

Download Certificate
TSYSI.HBA-CA1
Issuer: GEM.RCA1

SHA256 | RSA | 2048
Validity period: 2016-03-17 to 2024-03-15
Serial number: 0a
Fingerprint (SHA1): afc64871527cfa0d10670af41ed0544f0ea0bf88
Certificate revocation list (CRL): http://crl.hba.telesec.de/rl/TSYSI.HBA-CA1.crl

Product/Solution: HBA SMC-B

Download Certificate