Root Certification Authority (RCA)

The Root CA is the primary trust point for the entire PKI architecture. The Root CA is operated and managed by TCRA since 2024 as appointed by the Minister responsible for Communications with respect to the Electronic Transaction Act 2015.

Certification Authority (CA)

Certification Authorities are licensed by TCRA as per the Electronic Transactions (Certification Services) Regulations, 2024. CA certificates are digitally signed by Tanzania RCA.

A CA optionally create subordinate CAs to issue end entity Certificates. CA also suspends or revokes the issued Certificates. The CA maintains signed Certificate Revocation List (CRL) for the revoked and suspended Certificates in its repository and OCSP for certification verification.

Registration Authority (RA)

Certification Authorities are licensed by TCRA as per the Electronic Transactions (Certification Services) Regulations, 2024.

Subordinate CA may operate or outsource a Registration Authority that registers subscribers of certificates issued by the subordinate CA.