Supported Certificates in Root CA Bundle

A charger can be provisioned at the factory with a default root CA bundle containing the certificates listed below. This is recommended when the CSMS does not manage its own root certificates and instead relies on a cloud service provider — such as Amazon Web Services or Let’s Encrypt — to host its backend infrastructure. Using this bundle reduces the risk of undetected root certificate changes made by cloud providers without the knowledge of the CSMS operator.

Available from firmware 4.2.106.

Applicability: Chargers provisioned with LTE or Ethernet connectivity only.

#	Certificate Name	SHA-256 Fingerprint	Expiry (UTC)
1	Amazon ECDSA 256 Root EU M1	9ead32c9285fe68ba2c5b0fe427d149b103fdfa1d0958d77c3da0ff246e853d3	2042-11-14
2	Amazon ECDSA 384 Root EU M1	8e136ce0e77c848f2d2910abd4e3a764358bb1b7a4932202bc9b915732462d85	2042-11-14
3	Amazon Root CA 1	8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e	2038-01-17
4	Amazon Root CA 2	1ba5b2aa8c65401a82960118f80bec4f62304d83cec4713a19c39c011ea46db4	2040-05-26
5	Amazon Root CA 3	18ce6cfe7bf14e60b2e347b8dfe868cb31d02ebb3ada271569f50343b46db3a4	2040-05-26
6	Amazon Root CA 4	e35d28419ed02025cfa69038cd623962458da5c695fbdea3c22b0bfb25897092	2040-05-26
7	Amazon RSA 2048 Root EU M1	eaffac50c7e3e15a68f779a5e70ec2f5e9fc4a03ff69ab337b4d6c4510432395	2042-11-14
8	DigiCert Global Root CA	4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161	2031-11-10
9	DigiCert Global Root G2	cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f	2038-01-15
10	DigiCert Global Root G3	31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0	2038-01-15
11	DigiCert TLS ECC P384 Root G5	018e13f0772532cf809bd1b17281867283fc48c6e13be9c69812854a490c1b05	2046-01-14
12	DigiCert TLS RSA4096 Root G5	371a00dc0533b3721a7eeb40e8419e70799d2b0a0f2c1d80693165f7cec4ad75	2046-01-14
13	GlobalSign ECC Root CA R4	b085d70b964f191a73e4af0d54ae7a0e07aafdaf9b71dd0862138ab7325a24a2	2038-01-19
14	ISRG Root X1 (Let’s Encrypt)	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6	2035-06-04
15	ISRG Root X2 (Let’s Encrypt)	69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470	2040-09-17
16	Microsoft ECC Root Certificate Authority 2017	358df39d764af9e1b766e9c972df352ee15cfac227af6ad1d70e8e4a6edcba02	2042-07-18
17	Microsoft RSA Root Certificate Authority 2017	c741f70f4b2a8d88bf2e71c14122ef53ef10eba0cfa5e64cfa20f418853073e0	2042-07-18
18	GTS Root R1	d947432abde7b7fa90fc2e6b59101b1280e0e1c7e4e40fa3c6887fff57a7f4cf	2036-06-22
19	GTS Root R2	8d25cd97229dbf70356bda4eb3cc734031e24cf00fafcfd32dc76eb5841c7ea8	2036-06-22
20	GTS Root R3	34d8a73ee208d9bcdb0d956520934b4e40e69482596e8b6f73c8426b010a6f48	2036-06-22
21	GTS Root R4	349dfa4058c5e263123b398ae795573c4e1313c83fe68f93556cd5e8031b3c7d	2036-06-22

---