Thawte Intermediate CA Certificates for CodeSign

Thawte Intermediate CA Certificates for SSL 123

Thawte Intermediate CA Certificates for SGC Supercerts

Thawte Intermediate CA Certificates for SSL WebServer

Thawte Intermediate CA Certificates for SSL WebServer Wildcard

Thawte Intermediate CA Certificates for SSL WebServer EV

All Thawte CA Certificates

Thawte Root Certificates

Thawte CA Certificates Official link

Thawte Root Certificates Official link

Converter SSL

Intermediate CA Certificates for Thawte SSL 123

On June 27th, 2010 Thawte upgraded its root hierachy to 2048bit RSA Keys to enhance the security of all SSL products. As a part of this upgrade, all newly issued certificates now require the installation of the new Primary and Secondary Intermediate CA's along with your SSL certificate. These new Intermediate CA's MUST be installed in order for your SSL certificate to be fully trusted in all browsers.

As of July 15, 2010, Intermediate CAs have been updated for Thawte SSL and CodeSigning Products. You must ensure you install the proper Intermediate CA below.

Thawte uses Intermediate CAs to enhance the security of SSL and Code Signing certificates. Installing the correct Intermediate CAs or CA bundle for the certificate being used is absolutely essential to ensure that users don't see certificate errors when visiting a website or running software secured with a Thawte certificate.

For all Web servers, you must install the Thawte Primary and Secondary SSL Intermediate CA Certificates according to your Certificate type.

For Apache Web servers or similar, you only need to install the Intermediate CA Bundle according to your Certificate type.

This image represents where the Primary and Secondary CA's fit in the certificate chain. The chain may display differently depending on the type of web browser used to view a secure web page. As per the left image, older web browsers will show all the CA's in the chain, newer web browsers will display a shorter chain. The thawte Root CA sitting at the top of the chain by default is widely distributed into all common web browsers and therefore will not require installation.

Microsoft IIS
If you obtained your SSL certificate in the PKCS#7 format from your Thawte Certificate Center account, downloading and manually installing CA certificates shouldn't be required. If however you installed your SSL certiifcate from the approval email, please obtain the proper Intermediate CA below and see kb solution for installation instructions

Tomcat
Customers that selected these server platforms when enrolling will have received a version of their certificate containing the SSL certificate and all required Intermediate CAs (as a PKCS#7 bundle). Downloading and manually installing CA certificates shouldn't be required.

Apache and Apache derivatives
Apache HTTPD, other Apache derivatives and many webhosting providers are only able to specify a single CA certificate in the server or host configuration; these customers should download a CA bundle containing the relevant Intermediate and Cross Root CAs.

Other server platforms
Please consult the server documentation or search our Knowledge Base to determine which format is required. In many cases, separate Intermediate and Cross Root CAs are needed.

Copy the contents within the box below (including the BEGIN and END lines) and paste into a plain text editor such as Notepad or Vi. Save the file with a .cer extension.
* NOTE: Copy: (CTRL + C on PC, Command + C on Mac) Paste: (CTRL + V on PC, Command + V on Mac)

Thawte SSL 123 Primary Intermediate CA Certificate	Thawte SSL 123 Secondary Intermediate CA Certificate
Select	Select
Thawte SSL 123 Intermediate CA PKCS#7 CA For Microsoft IIS & Tomcat	Thawte SSL 123 Intermediate CA Bundle for Apache
Select	Select