Introduction #

eUICC Certificate Issuers (CIs)

GSMA Live CIs #

• GSM Association - RSP2 Root CI1 (CA: DigiCert)
  Specs: SGP.21 and SGP.22 version 2 and version 3
  Key ID: 81370f5125d0b1d408d4c3b232e6d25e795bebfbExpire at 2/22/2052
  CRL: gsma-crl.symauth.com/offlineca/gsma-rsp2-root-ci1.crl
• GSM Association - M2M31 Root CI2 (CA: Cybertrust)
  Specs: SGP.01 and SGP.02
  Key ID: d7a7d0c7c04ea76076e3f44faebde8779e2948d4Expire at 3/15/2052
• OISITE GSMA CI G1 (CA: WISeKey)
  Specs: SGP.21 and SGP.22 version 3
  Key ID: 4c27967ad20c14b391e9601e41e604ad57c0222fExpire at 1/7/2059
  CRL: public.wisekey.com/crl/ogsmacig1.crl

GSMA Test CIs #

• Symantec RSP Test Root CA (CA: DigiCert)
  Key ID: 665a1433d67c1a2c5db8b52c967f10a057ba5cb2Expire at 1/1/2050
  CRL: pki-crl.symauth.com/ca_a3dc2e3fea7708a11c889386d9d3a76f/LatestCRL.crl
• GSMA Test CI (SGP.26 v1.0; Files)
  Key ID: f54172bdf98a95d65cbeb88a38a1c11d800a85c3Expire at 2/1/2052
  Key ID: c0bc70ba36929d43b467ff57570530e57ab8fcd8Expire at 4/18/2052BRP P256r1
• Test CI (SGP.26 v1.5; Files)
  Key ID: f54172bdf98a95d65cbeb88a38a1c11d800a85c3Expire at 4/1/2055
  Key ID: c0bc70ba36929d43b467ff57570530e57ab8fcd8Expire at 4/1/2055BRP P256r1
• Test CI (SGP.26 v3.0.1; Files)
  Key ID: 34eecf13156518d48d30bdf06853404d115f955dExpire at 5/30/2058
  Key ID: 2209f61cd9ec5c9c854e787341ff83ecf9776a5bExpire at 6/1/2058BRP P256r1

Mainland China CIs #

• Taier eSIM Root CA (CA: CTTL)
  Key ID: 148030fc246c02ff222106125a8d6bda990afbe9
  CRL: 111.204.176.254:18889/download/n1.crl
  CRL: 111.204.176.254:18889/download/n2.crl
• MNO: China Unicom (CA: CUCA)
  Key ID: 16b5d16048e3ea02bd4b606e5f77a4bf20808d83Expire at 3/6/2037
  Key ID: 7c0e5470143ea8998ed9df300574c92e5a9acb1fExpire at 4/3/2038for testing
  Key ID: 3bd3f57b34f44436e08f028b5101c0e0a9b0986efor testing
• MNO: China Mobile (CA: CMCA)
  Key ID: cdf6d1c0a7b07f98a861b6e378b82f648d99663eExpire at 9/5/2052
• MNO: China Telecom (CA: NETCA)
  Key ID: d3ef83fc503f9c6ec4b7f6ae055b7f1373d4ab1e
  Key ID: 4eb94ea05b451a729cc5272ddf66f481701a05c9for testing
  CRL: crl.cnca.net/esim/ccs/a.crl
  CRL: crl.cnca.net/esim/ccs/b.crl

Independent Root CIs #

• MC4 CI TEST v2 (SAS-UP: IDEMIA)
  Key ID: 066d48a537d97191c7394adc3dec6519d1b0bf89for testing
• MC4 OT ROOT CI v1 (SAS-UP: IDEMIA)
  Key ID: cd6e60b72d7a063cbc84625b91e80fe30406e13eExpire at 11/9/2046
• SubMan V4.2 CI (SAS-UP: G+D)
  Key ID: ea53adef3329b9509afd755fd448b82dc1bcecffExpire at 8/12/2026for testing
• SubMan V4.2 CI Google Pixel (SAS-UP: G+D)
  Key ID: b60f0b897fd630b88cfed6161f8ea808c5382ac3Expire at 5/10/2027
• Entrust eSIM Certification Authority (CA: Entrust)
  Key ID: 16704b7f351e3607f18c4b70005c3a003dfd414aExpire at 10/16/2051
  CRL: crl.entrust.net/entesimca.crl
• Gemalto CE CI (CA: Entrust)
  Key ID: 77f0bd69d60bdc9e31da702b221c32808bb8e42aExpire at 3/12/2052for testing
• Truphone SAS-UP CA (SAS-UP: Truphone)
  Key ID: b70ba40c0f24f277b7b2050ad1e86a7cf28c4e57

Unverified Root CIs #

• Key ID: 012a83706174def23d357de977dbc3eeac5a66e0 (Mainland China CI?)
• Key ID: 062a9a9b493b51e5ec1c20923bd50243c2182c62 (Mainland China CI? for testing?)
• Key ID: 856bf2b42e451591a70107c09548a0111b25df61 (Mainland China CI?)
• Key ID: 5bc99966f5d5d82fe7dc8e044b5c21b61243e05c (from Infineon LPA)
• Key ID: b949c00607567bef0293cc7105ec3c3e2847494f (from Infineon LPA)
• Key ID: 181bf2594cc2e111ffa3f6886e10113212ec4e41 (from Pixel 6 Pro)
• Key ID: 0b1359633d2ab469761ca9d82b2229350db722d7 (from 5ber.eSIM)

References #

• CI Bundle
• Structured data: manifest.json
• Extract from com.google.android.euicc app
• Extract from com.google.android.euicc.wear app
• Extract from com.miui.euicc app
• Extract from com.samsung.euicc app
• Extract from com.xiaomi.wear.lpa app
• Extract from hermes
• GSMA eSIM Consumer Specification
• GSMA Certificate Issuer (CI)
• GSMA Security Accreditation Scheme (SAS)
• GSMA RSP Certificates
• 2021-04-18 ドコモ eSIM カード Ver.1 にはがっかりです (Japanese)
• 2024-01-30 FS.27 v2.0