New answers tagged x.509
Some public CAs have multiple roots, and more use multiple roots. Assuming gmail means mail.google.com, as the (currently two) reports at SSLLabs show google uses its own intermediate CA, (CN) Google Internet Authority G2 issued under (CN) GeoTrust Global CA. That Geotrust CA has a root cert with (SHA1) fingerprint beginning DE28, but also a nonroot ...
You can have different root certificates with different fingerprints which contain the same public key. This is actually not uncommon when you are in the process of replacing a root CA. See also Multiple Versions of Intermediate SSL Signing Certificate
Top 50 recent answers are included