Access to the Russian internet
RU
← Back to homeGUIDE

Install on Android

Why Android asks for confirmation

Since Android 11, neither a website nor an app can add a certificate authority silently — this is built-in protection. Installation takes a minute and is done by hand in Settings. The confirmation cannot be bypassed safely, so no automatic script exists without root.

Why a root and an intermediate certificate

The site’s certificate is signed by an intermediate authority, which is signed by the root. The browser only needs to trust the root: a site normally sends the intermediate during the connection. If a site is misconfigured and does not send it, the browser cannot complete the chain — then a pre-installed intermediate helps. So the root is required and the intermediates are a safety net.

  1. Download the certificate you need below. The browser requires one — Russian Trusted Root CA.
  2. Open the phone’s Settings: Install a certificate → CA certificate and pick the downloaded file. Since Android 11 the file cannot be opened directly — only from Settings. The exact path depends on the manufacturer:
Stock Android, PixelSettings → Security & privacy → More security & privacy (on Android 12 and earlier — “Advanced”) → Encryption & credentials → Install a certificate → CA certificate
Samsung (One UI)Settings → Security and privacy → Other security settings → Install from device storage → CA certificate
Xiaomi (HyperOS / MIUI)Settings → Passwords & security → Privacy → Encryption & credentials → Install a certificate → CA certificate
  1. Confirm the system warning and restart the browser. If the site still does not open, add the recommended intermediate certificates the same way.
Required — for the browserThe root certificate alone is enough for the browser to open Russian sites again.
Russian Trusted Root CA — root↓
Recommended — as a safety netAdd these if a site still does not open: some servers do not send the intermediate certificate, and the browser has to take it from your device.
Russian Trusted Sub CA — intermediate, 2022↓Russian Trusted Sub CA — intermediate, 2024↓
Only for GOST softwareRegular browsers do not need them because they do not support GOST. Install them only if you use GOST software such as CryptoPro.
Ministry of Digital Development GOST root — 2025↓Ministry of Digital Development GOST intermediate — 2025↓
You will see “Network may be monitored”

This is the standard Android notice for any certificate you add, not an error. You can remove the certificate at any time in the same menu. The files match the official Gosuslugi publication — checksums are in manifest.json. Chrome and Chromium-based browsers use the added authority right away, Firefox from version 120; some apps (for example, banking apps with certificate pinning) do not — that is a limit of the system, not of the installation.

The set was checked against the official Gosuslugi publication on 28 August 2026. The roots are valid until 2032 and 2040; the set is updated periodically in this project.