# Root Certificates

The certificate chain for BankID Signing is available at the following locations.

## Production

All trust services from [BankID BankAxept AS / STØ AS](https://eidas.ec.europa.eu/efda/trust-services/browse/eidas/tls/tl/NO/tsp/16) are registered in the [EU Trusted List](https://eidas.ec.europa.eu/efda/home). Only use certificates from the EU Trusted List in for validation in production.

For reference the root certificate is also available at::

- [BankID Root CA G2](https://pki.esign.bankid.no/bankidrootcag2.crt)

Intermediate certificates are available at:

- [BankID BankAxept CA 1a](https://pki.esign.bankid.no/bankidbankaxeptca1a.crt)
- [BankID BankAxept QTSA - CA 1a](https://pki.esign.bankid.no/bankidbankaxeptqtsa-ca1a.crt)

**End-user signing (QES)**

```mermaid
flowchart TB
    A[End-Entity Certificate] -->|signed by| B[BankID BankAxept CA 1a]
    B -->|trusted via| C[EU Trusted List]
```

**Timestamp (QTSA)**

```mermaid
flowchart TB
    A[Qualified Timestamping Unit] -->|signed by| B[BankID BankAxept QTSA - CA 1a]
    B -->|trusted via| C[EU Trusted List]
```

## Pre-production (test)

Root certificate for pre-production is available at:

- [BankID Root CA Preprod G2](https://pki.esign.preprod.bankid.no/bankidrootcapreprodg2.crt)

  ```text
  -----BEGIN CERTIFICATE-----
  MIICdDCCAfqgAwIBAgIUJf0/+bF7dsCAof9tcBmH+8+jdF8wCgYIKoZIzj0EAwMw
  aDEiMCAGA1UEAwwZQmFua0lEIFJvb3QgQ0EgUHJlcHJvZCBHMjEYMBYGA1UEYQwP
  TlRSTk8tOTI3NjExOTI5MRswGQYDVQQKDBJCYW5rSURCYW5rQXhlcHQgQVMxCzAJ
  BgNVBAYTAk5PMCAXDTI0MTExMjA4NTczN1oYDzIwNTAxMTA2MDg1NzM2WjBoMSIw
  IAYDVQQDDBlCYW5rSUQgUm9vdCBDQSBQcmVwcm9kIEcyMRgwFgYDVQRhDA9OVFJO
  Ty05Mjc2MTE5MjkxGzAZBgNVBAoMEkJhbmtJREJhbmtBeGVwdCBBUzELMAkGA1UE
  BhMCTk8wdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQu2/iypiU74+FUQGROwIcEbSC7
  FLHvGh3WCvO2beGb4NiPo6A16/5/cxV6HIC2/H0qEzfr2QYvtQ85+8pYlW3Te/+o
  D1K5OmaT0WjUOxVSr3huJCY/bN3zJ5WbAHGYWpyjYzBhMA8GA1UdEwEB/wQFMAMB
  Af8wHwYDVR0jBBgwFoAUSM7EtbhWz+1MAejZVpG9ARjyN0IwHQYDVR0OBBYEFEjO
  xLW4Vs/tTAHo2VaRvQEY8jdCMA4GA1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNo
  ADBlAjAc6X2nl8MU8SmMIZnF/8TGNqhpE2MsujR1KePR6/9wYahEirl6NVV8enrb
  o1gO6N8CMQCQGwG+/hckQcAXvv0HC2CBln9tbNZ2aIIsOhe/oBOnBHny38rN3Fb4
  LgzXBGTO16A=
  -----END CERTIFICATE-----
  ```

Intermediate certificates are available at:

- [CA 1a Preprod](https://pki.esign.preprod.bankid.no/bankidbankaxeptca1apreprod.crt)

  ```text
  -----BEGIN CERTIFICATE-----
  MIIC/DCCAoKgAwIBAgIUA3pn6hq2Vq32hxOvl4qGTX8bcFUwCgYIKoZIzj0EAwMw
  aDEiMCAGA1UEAwwZQmFua0lEIFJvb3QgQ0EgUHJlcHJvZCBHMjEYMBYGA1UEYQwP
  TlRSTk8tOTI3NjExOTI5MRswGQYDVQQKDBJCYW5rSURCYW5rQXhlcHQgQVMxCzAJ
  BgNVBAYTAk5PMB4XDTI0MTEyMjE0Mzk1M1oXDTM2MTExOTE0Mzk1MlowQzEWMBQG
  A1UEAwwNQ0EgMWEgUHJlcHJvZDEcMBoGA1UECgwTQmFua0lEIEJhbmtBeGVwdCBB
  UzELMAkGA1UEBhMCTk8wdjAQBgcqhkjOPQIBBgUrgQQAIgNiAAQiIWgutyfiW/ON
  AiQ+GdVstn7Mqd/RXX8zIf9q00VoEWWlbEQPyUvRxyasG6Np9eTHBKSR7UFxN9j8
  0OUH/sCNMM/uoHvItfgphcLEJxa1Ab3Gc0rBr91e6xS1jpPNcd6jggEQMIIBDDAP
  BgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFEjOxLW4Vs/tTAHo2VaRvQEY8jdC
  MFkGCCsGAQUFBwEBBE0wSzBJBggrBgEFBQcwAoY9aHR0cHM6Ly9wa2kuZXNpZ24u
  cHJlcHJvZC5iYW5raWQubm8vYmFua2lkcm9vdGNhcHJlcHJvZGcyLmNydDBOBgNV
  HR8ERzBFMEOgQaA/hj1odHRwczovL3BraS5lc2lnbi5wcmVwcm9kLmJhbmtpZC5u
  by9iYW5raWRyb290Y2FwcmVwcm9kZzIuY3JsMB0GA1UdDgQWBBQ7l71cibAoJfWS
  iTpOZqtOCsQqPzAOBgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwMDaAAwZQIxAOBx
  RqX5+RjgPdgEEgDDjLYgKGqnXfn2sqODok0sGqrYQS8OG2iU6IMhrOROSdk5ZQIw
  XemDArmMLcIbnk+eAHvGLap5HCPqexNtdtaCGbskUI51+X60pjYWw6hK8HpIpI8Z
  -----END CERTIFICATE-----
  ```

- [QTSA - CA 1a Preprod](https://pki.esign.preprod.bankid.no/bankidbankaxeptqtsa-ca1apreprod.crt)

  ```text
  -----BEGIN CERTIFICATE-----
  MIIDAzCCAomgAwIBAgIUU/nXWotthALoaY1QGQ1tAEEymXkwCgYIKoZIzj0EAwMw
  aDEiMCAGA1UEAwwZQmFua0lEIFJvb3QgQ0EgUHJlcHJvZCBHMjEYMBYGA1UEYQwP
  TlRSTk8tOTI3NjExOTI5MRswGQYDVQQKDBJCYW5rSURCYW5rQXhlcHQgQVMxCzAJ
  BgNVBAYTAk5PMB4XDTI0MTEyMjE0NDczMVoXDTM2MTExOTE0NDczMFowSjEdMBsG
  A1UEAwwUUVRTQSAtIENBIDFhIFByZXByb2QxHDAaBgNVBAoME0JhbmtJRCBCYW5r
  QXhlcHQgQVMxCzAJBgNVBAYTAk5PMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEEMlo
  +PnIy0Geqqmapy63CTLoAmjwNr0YDPs58xTH34pvPpIGw02JrG17Filxf+m8cBZr
  Ss7GHP4ANHjQo+br2fyxySggd6ADfVMkvoDVItVQITAyUlNIGxRwAghVdcmEo4IB
  EDCCAQwwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRIzsS1uFbP7UwB6NlW
  kb0BGPI3QjBZBggrBgEFBQcBAQRNMEswSQYIKwYBBQUHMAKGPWh0dHBzOi8vcGtp
  LmVzaWduLnByZXByb2QuYmFua2lkLm5vL2JhbmtpZHJvb3RjYXByZXByb2RnMi5j
  cnQwTgYDVR0fBEcwRTBDoEGgP4Y9aHR0cHM6Ly9wa2kuZXNpZ24ucHJlcHJvZC5i
  YW5raWQubm8vYmFua2lkcm9vdGNhcHJlcHJvZGcyLmNybDAdBgNVHQ4EFgQUsC13
  WOxspYHfuqXrUKO2IZJG7XgwDgYDVR0PAQH/BAQDAgEGMAoGCCqGSM49BAMDA2gA
  MGUCMQDH2J3QreduyngRQttVO6of/GbV7AaKufBObeywLAcbtNyzVjQOkIk8DJNq
  ClF8kQECMACXz8vMDdTwcSWETFYJ5Azxru2c0Lgu0F5GUpcXTgkdUFInRLefIHyi
  ZFh3ADMBhw==
  -----END CERTIFICATE-----
  ```