Apple Root CA
E771047
Apple Root CA is Apple’s primary root certificate authority that underpins the trust and validation of its digital certificates across Apple platforms and services.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Apple Root CA canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T9003040 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Apple Root CA Context triple: [Apple Developer ID certificate, chainOfTrust, Apple Root CA]
-
A.
DST Root CA X3
DST Root CA X3 is a widely trusted root certificate authority operated by IdenTrust that historically provided the cross-signed trust anchor enabling broad browser compatibility for Let’s Encrypt certificates.
-
B.
ISRG Root X1
ISRG Root X1 is the primary root certificate operated by the Internet Security Research Group that underpins the trust for most Let’s Encrypt-issued TLS/SSL certificates used across the web.
-
C.
ISRG Root X2
ISRG Root X2 is a widely trusted intermediate certificate authority operated by the Internet Security Research Group to enable free, automated TLS/SSL certificates for the web.
-
D.
Let’s Encrypt
Let’s Encrypt is a free, automated, and open certificate authority that provides TLS/SSL certificates to enable secure HTTPS connections for websites worldwide.
-
E.
Entrust Technologies
Entrust Technologies is a cybersecurity company known for developing encryption and data protection solutions, including contributions to symmetric-key block cipher design.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Apple Root CA Target entity description: Apple Root CA is Apple’s primary root certificate authority that underpins the trust and validation of its digital certificates across Apple platforms and services.
-
A.
DST Root CA X3
DST Root CA X3 is a widely trusted root certificate authority operated by IdenTrust that historically provided the cross-signed trust anchor enabling broad browser compatibility for Let’s Encrypt certificates.
-
B.
ISRG Root X1
ISRG Root X1 is the primary root certificate operated by the Internet Security Research Group that underpins the trust for most Let’s Encrypt-issued TLS/SSL certificates used across the web.
-
C.
ISRG Root X2
ISRG Root X2 is a widely trusted intermediate certificate authority operated by the Internet Security Research Group to enable free, automated TLS/SSL certificates for the web.
-
D.
Let’s Encrypt
Let’s Encrypt is a free, automated, and open certificate authority that provides TLS/SSL certificates to enable secure HTTPS connections for websites worldwide.
-
E.
Entrust Technologies
Entrust Technologies is a cybersecurity company known for developing encryption and data protection solutions, including contributions to symmetric-key block cipher design.
- F. None of above. chosen
Statements (47)
| Predicate | Object |
|---|---|
| instanceOf |
X.509 public key certificate
ⓘ
root certificate authority ⓘ |
| associatedWith |
Apple Developer ID certificates
ⓘ
Apple ID authentication certificates ⓘ Apple Push Notification service certificates NERFINISHED ⓘ |
| basicConstraints | CA:true ⓘ |
| certificateStandard | X.509 NERFINISHED ⓘ |
| commonName | Apple Root CA NERFINISHED ⓘ |
| country | US NERFINISHED ⓘ |
| governedBy |
Apple Certificate Policy
NERFINISHED
ⓘ
Apple Certification Practice Statement NERFINISHED ⓘ |
| includedIn |
Apple trusted root store
NERFINISHED
ⓘ
iOS trusted root store ⓘ macOS trusted root store ⓘ |
| issuer | Apple Root CA NERFINISHED ⓘ |
| keyUsage |
CRL signing
ⓘ
certificate signing ⓘ |
| managedBy | Apple Security Engineering NERFINISHED ⓘ |
| operator | Apple Inc. NERFINISHED ⓘ |
| organization | Apple Inc. NERFINISHED ⓘ |
| owner | Apple Inc. NERFINISHED ⓘ |
| partOf | Apple Public Key Infrastructure NERFINISHED ⓘ |
| pathLengthConstraint | allows intermediate CAs ⓘ |
| securityGoal |
authentication
ⓘ
confidentiality ⓘ integrity ⓘ non-repudiation ⓘ |
| subject | Apple Root CA NERFINISHED ⓘ |
| supportsProtocol |
SSL
ⓘ
TLS ⓘ |
| trustAnchorFor |
Apple PKI hierarchy
NERFINISHED
ⓘ
Apple intermediate certificate authorities ⓘ |
| trustModel | hierarchical PKI ⓘ |
| usedBy |
Apple platforms
ⓘ
iOS NERFINISHED ⓘ iPadOS NERFINISHED ⓘ macOS NERFINISHED ⓘ tvOS NERFINISHED ⓘ visionOS NERFINISHED ⓘ watchOS NERFINISHED ⓘ |
| usedFor |
Apple service authentication
ⓘ
TLS certificate validation ⓘ code signing certificate validation ⓘ software update validation ⓘ |
| validates |
client certificates
ⓘ
code signing certificates ⓘ server certificates ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Apple Root CA Description of subject: Apple Root CA is Apple’s primary root certificate authority that underpins the trust and validation of its digital certificates across Apple platforms and services.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.
subject surface form:
Apple Developer ID certificate