thawte root certificates

The following root certificates are available for download. If your organization requires a license agreement to insert the roots into an application please use the Root Certificate License Agreement (PDF). Please contact us if you have any questions.

Subscribe for updates
Symantec may from time to time provide information about updates to our roots and the certificates they sign. If you would like to be notified of updates please provide us the following information.
The information you enter will be used for sending notification of updates only and will not be used for any other purposes.

First name:

Last name:

Company:

E-mail address:

Phone:

Thank you for your submission. You will be notified of future Root updates.

ALL ROOT CERTIFICATES ARE PROVIDED "AS IS" WITHOUT ANY WARRANTY WHATSOEVER. SYMANTEC HEREBY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT OF THIRD PARTY RIGHTS. SYMANTEC FURTHER DISCLAIMS ANY WARRANTY FOR ANY OUTDATED ROOTS THAT ARE REPLACED BY UPDATED ROOTS MADE AVAILABLE BY SYMANTEC.

Thawte Root Package
Download a root package with all the Thawte roots.


Root 1
Thawte Primary Root CA
Description:
This root CA is the root used for Thawte Extended Validation Certificates and should be included in root stores. After June, 2010 this root will also be the primary root used for all Thawte SSL and Code Signing certificates.

Country = US
Organization = thawte, Inc.
Organizational Unit = Certification Services Division
Organizational Unit = (c) 2006 thawte, Inc. - For authorized use only
Common Name = thawte Primary Root CA
Validity Start: November 17, 2006
Validity End: July 16, 2036
Key Size: RSA (2048 bits)
Signature Algorithm: SHA1 With RSA
Serial Number: 34 4e d5 57 20 d5 ed ec 49 f4 2f ce 37 db 2b 6d
Certificate SHA1 fingerprint: 91 c6 d6 ee 3e 8a c8 63 84 e5 48 c2 99 29 5c 75 6c 81 7b 81

Test Site: https://ssltest7.bbtest.net

Download Root Now (Right Click, Save As)


Root 2
Thawte Premium Server CA
Description:
This root CA is the root currently used for Thawte Web Server Certificates and Code Signing Certificates. It is intended to be the primary root used for these products until mid 2010 when Thawte transitions to using a 2048 bit root. . After that transition this root will be used as part of a cross certification to ensure legacy applications continue to trust Thawte certificates and must continue to be included in root stores by vendors. Vendors should not plan on removing support for this root until officially advised that the root is no longer needed to support certificates or CRL validation.

Country = ZA
Organization = Thawte Consulting cc
Organizational Unit = Class 3 Public Primary Certification Authority - G2
Organizational Unit = Certification Services Division
Common name = Thawte Premium Server CA
Serial Number: 36 12 22 96 c5 e3 38 a5 20 a1 d2 5f 4c d7 09 54
Valid From: Wednesday, July 31, 1996
Valid to: Friday, January 01, 2021
Certificate SHA1 Fingerprint: e0 ab 05 94 20 72 54 93 05 60 62 02 36 70 f7 cd 2e fc 66 66
Key Size: RSA(1024 Bits)
Signature Algorithm: sha1RSA

Test Site: https://ssltest28.bbtest.net

Download Root Now (Right Click, Save As)


Root 3
Thawte Server CA
Description:
This root CA is the root used for SSL123 It is intended to be the primary root used for these products until mid 2010 when VeriSign transitions to using a 2048 bit root. Vendors should not plan on removing support for this root until officially advised that the root is no longer needed to support certificates or CRL validation.

Country = ZA
Organization = Thawte Consulting cc
Organizational Unit = Class 3 Public Primary Certification Authority - G2
Organizational Unit = Certification Services Division
Common name = Thawte Server CA
Serial Number: ‎01
Valid From: Wednesday, July 31, 1996
Valid to: Thursday, December 31, 2020
Certificate SHA1 Thumbprint: 23 e5 94 94 51 95 f2 41 48 03 b4 d5 64 d2 a3 a3 f5 d8 8b 8c
Key Size: RSA(1024 Bits)
Signature Algorithm: MD5RSA

Test Site: https://ssltest29.bbtest.net

Download Root Now (Right Click, Save As)


Root 4
Thawte Primary Root CA – G2 (ECC)
Description:
This root CA is not used today. It is intended for use in the future for SSL and Code Signing services needing an ECC encryption algorithm. This root should be included in root stores.

Country = US
Organization = thawte, Inc.
Organizational Unit = (c) 2007 thawte, Inc. - For authorized use only
Common Name = thawte Primary Root CA - G2
Serial Number: 35 fc 26 5c d9 84 4f c9 3d 26 3d 57 9b ae d7 56
Valid From: Sunday, November 04, 2007 5:00:00 PM
Valid to: Monday, January 18, 2038 4:59:59 PM
Certificate SHA1 Fingerprint: aa db bc 22 23 8f c4 01 a1 27 bb 38 dd f4 1d db 08 9e f0 12
Signature Algorithm: SHA384 With ECC

Download Root Now (Right Click, Save As)


Root 5
Thawte Primary Root CA – G3 (SHA256)
Description:
This root is not being used today. It is intended for use in the future for SSL nd Code Signing certificates requiring SHA 256 encryption algorithm. This root should be included in root stores.

Country = US Organization = thawte, Inc. Organizational Unit = Certification Services Division Organizational Unit = (c) 2008 thawte, Inc. - For authorized use only Common Name = thawte Primary Root CA - G3 Serial Number: ‎‎ 60 01 97 b7 46 a7 ea b4 b4 9a d6 4b 2f f7 90 fb Valid From: Tuesday, April 01, 2008 5:00:00 PM Valid to: Tuesday, December 01, 2037 4:59:59 PM Certificate SHA1 Fingerprint: f1 8b 53 8d 1b e9 03 b6 a6 f0 56 43 5b 17 15 89 ca f3 6b f2 Signature Algorithm: SHA256 With RSA
Download Root Now (Right Click, Save As)


Root 6
Thawte Personal Freemail CA
Description:
This root CA was used today to sign all Thawte Personal Freemail and Web of Trust certificates. These products are no longer offered and this root can be removed after 12/31/2010.

Country = ZA
State = Western Cape
Locality = Cape Town
Organization = Thawte Consulting
Organizational Unit = Certification Services Division
Common Name = Thawte Personal Freemail CA
Email Address = < IA5 >personal-freemail@thawte.com
Serial Number: 00
Valid From: Sunday, December 31, 1995 5:00:00 PM
Valid to: Thursday, December 31, 2020 4:59:59 PM
Certificate SHA1 Fingerprint: 20 99 00 b6 3d 95 57 28 14 0c d1 36 22 d8 c6 87 a4 eb 00 85

Download Root Now (Right Click, Save As)


Retired Roots
The following roots have been retired and need no longer be distributed by vendors


Thawte Personal basic CA
Country = ZA
State = Western Cape
Locality = Cape Town
Organization = Thawte Consulting
Organizational Unit = Certification Services Division
Common Name = Thawte Personal Basic CA
Email Address = < IA5 >personal-basic@thawte.com
Serial Number: 00
Certificate SHA1 Fingerprint: 40 e7 8c 1d 52 3d 1c d9 95 4f ac 1a 1a b3 bd 3c ba a1 5b fc


Thawte Personal Premium CA
Country = ZA
State = Western Cape
Locality = Cape Town
Organization = Thawte Consulting
Organizational Unit = Certification Services Division
Common Name = Thawte Personal Premium CA
Email Address = < IA5 >personal-premium@thawte.com
Serial Number: 00
Certificate SHA1 Fingerprint: 36 86 35 63 fd 51 28 c7 be a6 f0 05 cf e9 b4 36 68 08 6c ce




siège de l'entreprise

Thawte
The Gateway
Century Lane
Century City, 7441
Cape Town
Afrique du Sud

Adresse postale :
P O Box 15986
Panorama 7500
Cape Town
Afrique du Sud

Tél. : +353 1 793 9141
Fax : +27 21 819 2950