Thawte Intermediate and Cross Certificate CAs

General Information ID:    INFO1384
Version:    25.0
Published:    06/14/2011
Updated:    03/06/2015

Description

Thawte uses Intermediate CAs to enhance the security of SSL and Code Signing certificates. Installing the correct Intermediate CAs or CA bundle for the certificate being used is absolutely essential to ensure that users don't see certificate errors when visiting a website or running software secured with a Thawte certificate.

The following tables list Thawte products with links to the relevant Intermediate CA certificates and CA bundles. Please read the following notes to determine which you need:

Microsoft IIS
If you obtained your SSL certificate in the PKCS#7 format from your Thawte Certificate Center (TCC) account, downloading and manually installing CA certificates shouldn't be required. If however you installed your SSL certiifcate from the approval email, please obtain the proper Intermediate CA below and see kb solution SO14996 for installation instructions

Tomcat

Customers that selected these server platforms when enrolling will have received a version of their certificate containing the SSL certificate and all required Intermediate CAs (as a PKCS#7 bundle). Downloading and manually installing CA certificates shouldn't be required.

Apache and Apache derivatives
Apache HTTPD, other Apache derivatives and many webhosting providers are only able to specify a single CA certificate in the server or host configuration; these customers should download a CA bundle containing the relevant Intermediate and Cross Root CAs.

Other server platforms
Please consult the server documentation or search our Knowledge Base to determine which format is required. In many cases, separate Intermediate and Cross Root CAs are needed.



RSA SHA-1 SSL Certificates
Product Name Separate CAs CA Bundle
SSL123 AR1371 AR1372
SSL Web Server /
Wildcard SSL
AR1373 AR1374
SGC SuperCert (enrolled before 10/10/2010) AR1521 Not Applicable
(use AR1521)
SGC SuperCert (enrolled on or after 10/10/2010) AR1377 AR1532
SSL Extended Validation AR2106 AR2107
Trial SSL AR1383 Not Applicable
(use AR1383)

 

RSA SHA-2  (under SHA-1 Root)
Product Name Separate CAs CA Bundle
SSL123 AR2156 AR2157
SSL Extended Validation AR2048 AR2050
SSL Web Server/Wildcard AR2049 AR2051
SGC SuperCert AR2049 AR2051

 

RSA SHA-2  (under SHA-2 Root)
Product Name Separate CAs CA Bundle
SSL123 AR2158 N/A
SSL Extended Validation AR2056 N/A
SSL Web Server/Wildcard AR2057 N/A
SGC SuperCert AR2057 N/A
   

DSA SSL Certificates
Product Name Intermediate CA
SSL Web Server
SSL Wildcard
SSL Web Server with Extended Validation
AR1890

   

Code Signing RSA SHA-1
Product Name Separate CAs
Microsoft® Authenticode® (Multi-Purpose)
Sun Java™
Adobe® AIR™
Mac®
Microsoft® Office VBA
AR1406

   

Code Signing RSA SHA-2 (under SHA-1 Root)
Product Name Separate CAs
Microsoft® Authenticode® (Multi-Purpose)
Sun Java™
Adobe® AIR™
Mac®
Microsoft® Office VBA
AR2172

   

Code Signing RSA SHA-2 (under SHA-2 Root)
Product Name Separate CAs
Microsoft® Authenticode® (Multi-Purpose)
Sun Java™
Adobe® AIR™
Mac®
Microsoft® Office VBA
AR2173

 


 

Knowledge Center


Search Tips