Thawte Intermediate CA Certificates for CodeSign

Thawte Intermediate CA Certificates for SSL 123

Thawte Intermediate CA Certificates for SGC Supercerts

Thawte Intermediate CA Certificates for SSL WebServer

Thawte Intermediate CA Certificates for SSL WebServer Wildcard

Thawte Intermediate CA Certificates for SSL WebServer EV

All Thawte CA Certificates

Thawte Root Certificates

Thawte CA Certificates Official link

Thawte Root Certificates Official link

Converter SSL

Thawte CodeSig Intermediate CA Certificates for Microsoft® Authenticode® (Multi-Purpose), Sun Java™, Adobe® AIR™, Mac®, Microsoft® Office VBA

As of July 15, 2010, Intermediate CAs have been updated for Thawte SSL and CodeSigning Products. You must ensure you install the proper Intermediate CA below.

Thawte uses Intermediate CAs to enhance the security of SSL and Code Signing certificates. Installing the correct Intermediate CAs or CA bundle for the certificate being used is absolutely essential to ensure that users don't see certificate errors when visiting a website or running software secured with a Thawte certificate.

For all Web servers, you must install the Thawte Primary and Secondary SSL Intermediate CA Certificates according to your Certificate type.

For Apache Web servers or similar, you only need to install the Intermediate CA Bundle according to your Certificate type.

Copy the contents within the box below (including the BEGIN and END lines) and paste into a plain text editor such as Notepad or Vi. Save the file with a .cer extension.
* NOTE: Copy: (CTRL + C on PC, Command + C on Mac) Paste: (CTRL + V on PC, Command + V on Mac)

Thawte CodeSigm Primary Intermediate CA Certificate	Thawte CodeSigm Secondary Intermediate CA Certificate
Select	Select

Thawte Code Signing certificates require the use of an Intermediate CA and a Cross Root CA to ensure that signed code is fully trusted by users. To download each CA certificate, copy the entire contents of the first text box below (including the BEGIN CERTIFICATE and END CERTIFICATE lines) and paste in to a new text document on the computer used to sign code. Do not use "rich" text editors (such as Microsoft Word) to save this text document, as doing so may add extra line break characters in to the certificate.

Be sure to repeat this process for the second text box below, as both CA certificates must be installed before signing any code. In many cases, the CA certificates are bundled with the Code Signing certificate - manual installation may not be required. If the CA certificates need to be installed, please see below for instructions:

Installation to the Windows certificate store (for Authenticode and Microsoft Office/VBA certificates) Save each of the text boxes below to separate files (using Notepad or other plain text editor) on the Desktop of the computer being used to sign - call the first intca.cer and the second crossca.cer. Double-click the first file. On the Certificate Information window, click the 'Install Certificate' button. On the Certificate Import Wizard window, click the 'Next' button. Select the 'Place all certificates in the following store' option, then click the 'Browse' button. Choose the 'Intermediate Certification Authorities' folder, click the 'OK' button and then the 'Next' button. Click the 'Finish' button and click 'OK' or 'Yes' to any messages or warnings that appear. Repeat steps 2-5 for the second certificate file.

Installation to a Java Keystore (for Java certificates) Save each of the text boxes below to separate files (using Notepad or other plain text editor) on the Desktop of the computer being used to sign - call the first intca.cer and the second crossca.cer. Place the two CA files in to the same directory as the keystore file, then run the following two commands (these commands assume the keystore filename is keystore.jks): keytool -import -trustcacerts -alias intca -file intca.cer -keystore keystore.jks keytool -import -trustcacerts -alias crossca -file crossca.cer -keystore keystore.jks