diff --git a/lib/pedicel/base.rb b/lib/pedicel/base.rb
index d212d26..ef153c5 100644
--- a/lib/pedicel/base.rb
+++ b/lib/pedicel/base.rb
@@ -184,7 +184,7 @@ def self.extract_certificates(signature:, config: Pedicel::DEFAULT_CONFIG)
     end
 
     def self.verify_root_certificate(root:, trusted_root:)
-      raise SignatureError, 'root certificate is not trusted' unless root == trusted_root
+      raise SignatureError, 'root certificate is not trusted' unless root.to_der == trusted_root.to_der
 
       true
     end