BPR Trust · الثقة

Verify certificates issued under the BrainSAIT Provider Registry (IANA PEN 61026). Compare fingerprints out-of-band before trusting.

BPR Root CA SHA-256
5C:1D:64:37:58:15:D2:FA:93:E0:AC:1F:10:86:DF:05:B3:E7:E1:96:E6:5D:39:65:14:59:C0:38:CD:F5:55:A5

BPR Provider Issuing CA SHA-256
98:45:2C:10:BD:52:C7:28:CC:B6:81:B8:47:BA:75:19:0A:57:29:6F:F7:DB:E2:99:5F:C5:A9:49:25:88:23:88

Download

bpr-root.cer (DER) · bpr-root.pem
bpr-chain.pem (issuing + root)
bpr-root.mobileconfig — one-click trust profile for macOS/iOS

Verify a provider certificate

openssl verify -CAfile bpr-chain.pem -purpose sslclient provider.crt

Provider identity is in the subject serialNumber (SPID) and the SAN URI https://registry.brainsait.de/spid/<SPID>; policy OID 1.3.6.1.4.1.61026.1.1.

Public material only. BrainSAIT never asks for private keys.