Hiper Ajans Certificate Authority

Root CA certificate

Download CA certificate (PEM, .crt) DER format (.cer) Certificate revocation list (.crl)

Both files contain the same certificate. Windows and macOS accept either format; Linux and Java tooling usually expect the PEM file.

Certificate details

Common name	Hiper Root CA R1
Subject	C=TR, O=Hiper Ajans, OU=Certificate Authority, CN=Hiper Root CA R1
Serial number	49:6C:C7:8A:98:DE:AE:41:F9:99:85:89:D3:4F:47:23
Valid from	16 September 2026
Valid until	16 September 2046
Public key	RSA 4096 bit
Signature digest	SHA256
Basic constraints	CA:TRUE, pathlen:0 (no intermediate CAs)
SHA-256 fingerprint	AD48 9C02 CB12 7010 189E 06C2 0B01 36BB A7D5 7023 F694 6C2C F1B2 584E 42A5 69EB
SHA-1 fingerprint	5ABB DECE 87B3 D9ED 225D 41A0 9267 25B1 1FD8 B16D

Verify before you trust

Do not install this certificate before confirming the SHA-256 fingerprint through a second, independent channel. Compare the value shown above with the output of one of the following commands.

openssl x509 -in hiperajans-ca.crt -noout -fingerprint -sha256

certutil -hashfile hiperajans-ca.cer SHA256

The certutil command reports the hash of the DER encoded file, which is identical to the certificate fingerprint.

Installation

Windows (per machine)

certutil -addstore -f Root hiperajans-ca.cer

Run from an elevated command prompt. For domain-wide deployment, distribute the certificate through Group Policy: Computer Configuration → Windows Settings → Security Settings → Public Key Policies → Trusted Root Certification Authorities.

Debian and Ubuntu

sudo cp hiperajans-ca.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates

RHEL, Rocky and AlmaLinux

sudo cp hiperajans-ca.crt /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust extract

macOS

sudo security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain hiperajans-ca.crt

Java keystore

keytool -importcert -trustcacerts -alias hiperajans-root-ca \
  -file hiperajans-ca.crt -keystore $JAVA_HOME/lib/security/cacerts

Firefox

Firefox keeps its own trust store. Open Settings → Privacy & Security → Certificates → View Certificates → Authorities → Import, then enable trust for identifying websites. In managed environments the certificate can be deployed with an enterprise policy instead.

Distribution points

Certificates issued by this authority carry the following addresses. Keep them reachable from every network segment that performs certificate validation.

CA certificate (AIA)	https://ca.hiperajans.com/aia/ca-1.cer
Revocation list (CDP)	https://ca.hiperajans.com/crl/ca-1.crl

The revocation list is regenerated whenever a certificate is issued or revoked. Clients that enforce revocation checking must be able to reach the CDP address over HTTP.

Scope

This authority signs end-entity certificates only. It issues no intermediate authorities: the root certificate carries a path length constraint of zero, so every valid chain is exactly two certificates long.

For questions about this certificate authority, contact security@hiperajans.com.