Mollie

Mollie PKI Repository

External root and intermediate Certificate Authorities used for Mollie's external-facing mutual TLS. Published for chain building, CRL checking, and manual verification.

Certificate Practice Statement (PDF)

Certificate Authority Issued Expires Certificate CRL SHA-256 fingerprint
Mollie External Prod Root CA 2026-06-03 2031-06-02 ca.crt crl.crl BD:73:3D:F2:92:79:FE:A9:B1:36:7B:22:74:5D:4D:E0:1C:57:D6:D1:2A:B4:3B:06:90:E1:5F:EB:00:D6:43:F2
Mollie External Nonprod Root CA 2026-06-03 2031-06-02 ca.crt crl.crl 59:D8:C9:7A:74:95:0F:17:FF:77:7D:29:F1:DC:87:85:30:F6:04:DC:31:FD:34:75:33:E2:55:07:6A:84:87:13
Mollie External Prod Subordinate CA 2026-06-08 2029-06-07 ca.crt crl.crl C2:6A:7C:1D:2A:17:8E:92:DC:A4:05:33:A4:27:94:5E:FF:BC:40:C4:35:6A:1A:F2:5C:7F:7E:37:1E:2E:50:5D
Mollie External Nonprod Subordinate CA 2026-06-08 2027-06-08 ca.crt crl.crl 0B:F0:31:14:7B:EF:89:3D:52:6A:2A:F6:D9:E9:BD:C9:E9:D7:D1:62:D3:34:8A:39:6F:5B:A8:B3:8D:6D:D9:85

Verifying a certificate

Download the certificate from the link above, then compute its SHA-256 fingerprint locally and compare it against the value listed in the table (case-insensitive, colons optional):

openssl x509 -inform der -in ca.crt -noout -fingerprint -sha256

Files served from ca.molops.io are DER-encoded. If you've already converted a copy to PEM, drop -inform der. A match confirms the file you downloaded is byte-identical to the one Mollie published here.