{"id":4011,"date":"2024-08-29T18:44:12","date_gmt":"2024-08-29T18:44:12","guid":{"rendered":"https:\/\/www.thesslstore.com\/knowledgebase\/?post_type=ht_kb&#038;p=4011"},"modified":"2026-03-02T18:58:43","modified_gmt":"2026-03-02T18:58:43","slug":"thawte-intermediate-certificates","status":"publish","type":"ht_kb","link":"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/","title":{"rendered":"Thawte Intermediate Certificates"},"content":{"rendered":"\r\n<h1>How to Select Intermediate and Root Certificates for Thawte SSL<\/h1>\r\n<p>You may select different intermediate and root certificates (ICAs) when generating your Thawte SSL certificate on TheSSLStore.com.\u00a0<\/p>\r\n<p>The majority of users should keep the default Intermediate option.\u00a0<\/p>\r\n<p>If you need to select a specific intermediate and root certificate for your Thawte SSL, please use these tables as a reference to pick the correct chain on your SSL generation form.<\/p>\r\n<p>(<strong>Note:<\/strong> the certificate menu may only show the name of the intermediate certificate &#8211; the tables indicate which root will be provided for each intermediate selection).<\/p>\r\n<p><strong>Thawte EV SSL ICAs<\/strong><\/p>\r\n<table style=\"width: 100%; height: 332px;\">\r\n<tbody>\r\n<tr style=\"height: 24px;\">\r\n<td style=\"height: 24px; width: 53.5604%;\"><strong>Intermediate<\/strong><\/td>\r\n<td style=\"height: 24px; width: 43.6533%;\"><strong>Root<\/strong><\/td>\r\n<td style=\"width: 2.63158%;\"><strong>Info<\/strong><\/td>\r\n<\/tr>\r\n<tr style=\"height: 24px;\">\r\n<td style=\"height: 24px; width: 53.5604%;\">Thawte EV RSA CA G2 (SHA2-256)<\/td>\r\n<td style=\"height: 24px; width: 43.6533%;\">DigiCert Global Root G2 (SHA2-256)<\/td>\r\n<td style=\"width: 2.63158%;\">G2 root<\/td>\r\n<\/tr>\r\n<tr style=\"height: 48px;\">\r\n<td style=\"height: 48px; width: 53.5604%;\">Thawte TLS ECC CA G1 (SHA256ECDSA)<\/td>\r\n<td style=\"height: 48px; width: 43.6533%;\">DigiCert Global Root G3 (SHA384ECDSA)<\/td>\r\n<td style=\"width: 2.63158%;\">G3 root<\/td>\r\n<\/tr>\r\n<tr style=\"height: 48px;\">\r\n<td style=\"height: 48px; width: 53.5604%;\">Thawte EV ECC CA 2018 (SHA2-256)<\/td>\r\n<td style=\"height: 48px; width: 43.6533%;\">DigiCert High Assurance EV Root CA (SHA1)<\/td>\r\n<td style=\"width: 2.63158%;\">NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026<\/td>\r\n<\/tr>\r\n<tr style=\"height: 48px;\">\r\n<td style=\"height: 48px; width: 53.5604%;\">Thawte EV ECC CA 2018 (SHA2-256)<\/td>\r\n<td style=\"height: 48px; width: 43.6533%;\">DigiCert High Assurance EV Root CA (SHA1)<\/td>\r\n<td style=\"width: 2.63158%;\">NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026<\/td>\r\n<\/tr>\r\n<tr style=\"height: 48px;\">\r\n<td style=\"height: 48px; width: 53.5604%;\">Thawte G5 TLS RSA4096 SHA384 2022 CA1 (SHA2-384)<\/td>\r\n<td style=\"height: 48px; width: 43.6533%;\">DigiCert TLS RSA4096 Root G5<\/td>\r\n<td style=\"width: 2.63158%;\">The G5 root is not widely trusted and requires a cross-signed intermediate.<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<p><strong>Thawte OV SSL ICAs<\/strong><\/p>\r\n<table style=\"width: 99.8452%;\">\r\n<tbody>\r\n<tr>\r\n<td style=\"width: 344px;\"><strong>Intermediate<\/strong><\/td>\r\n<td style=\"width: 284px;\"><strong>Root<\/strong><\/td>\r\n<td style=\"width: 17px;\"><strong>Info<\/strong><\/td>\r\n<\/tr>\r\n<tr>\r\n<td style=\"width: 344px;\">Thawte TLS RSA CA G1 (SHA2-256)<\/td>\r\n<td style=\"width: 284px;\">\r\n<p>DigiCert Global Root G2 (SHA2-256)<\/p>\r\n<\/td>\r\n<td style=\"width: 17px;\">\r\n<p>G2 root<\/p>\r\n<\/td>\r\n<\/tr>\r\n<tr>\r\n<td style=\"width: 344px;\">Thawte TLS ECC CA G1 (SHA256ECDSA)<\/td>\r\n<td style=\"width: 284px;\">DigiCert Global Root G3 (SHA384ECDSA)<\/td>\r\n<td style=\"width: 17px;\">G3 root<\/td>\r\n<\/tr>\r\n<tr>\r\n<td style=\"width: 344px;\">Thawte RSA CA 2018 (SHA2-256)<\/td>\r\n<td style=\"width: 284px;\">DigiCert Global Root CA (SHA1)<\/td>\r\n<td style=\"width: 17px;\">NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026<\/td>\r\n<\/tr>\r\n<tr>\r\n<td style=\"width: 344px;\">Thawte ECC CA 2018 (SHA2-256)<\/td>\r\n<td style=\"width: 284px;\">DigiCert Global Root CA (SHA1)<\/td>\r\n<td style=\"width: 17px;\">NOT RECOMMENDED: This root will be removed from trust stores on April 14, 2026<\/td>\r\n<\/tr>\r\n<tr>\r\n<td style=\"width: 344px;\">Thawte G5 TLS RSA4096 SHA384 2022 CA1 (SHA2-384)<\/td>\r\n<td style=\"width: 284px;\">DigiCert TLS RSA4096 Root G5 (SHA2-384)<\/td>\r\n<td style=\"width: 17px;\">The G5 root is not widely trusted and requires a cross-signed intermediate.<\/td>\r\n<\/tr>\r\n<tr>\r\n<td style=\"width: 344px;\">Thawte G5 TLS ECC P-384 SHA384 2022 CA2 (SHA384ECDSA)<\/td>\r\n<td style=\"width: 284px;\">DigiCert TLS ECC P384 Root G5 (SHA384ECDSA)<\/td>\r\n<td style=\"width: 17px;\">The G5 root is not widely trusted and requires a cross-signed intermediate.<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<p><strong>Thawte DV SSL ICAs<\/strong><\/p>\r\n<p><\/p>\r\n<p>At this time, Domain Validation (DV) level SSL cannot change intermediate or root certificates during enrollment or re-issue.<\/p>\r\n<p>The default root for Thawte DV SSL is DigiCert Global Root G2.<\/p>\r\n<p>If you need help with the intermediate and root chain for your DV SSL certificate, please <a href=\"https:\/\/www.thesslstore.com\/support\/\">open a support ticket<\/a> from your account email address for best assistance.\u00a0<\/p>","protected":false},"excerpt":{"rendered":"<p>How to Select Intermediate and Root Certificates for Thawte SSL You may select different intermediate and root certificates (ICAs) when generating your Thawte SSL certificate on TheSSLStore.com.\u00a0 The majority of users should keep the default Intermediate option.\u00a0 If you need to select a specific intermediate and root certificate for your&#8230;<\/p>\n","protected":false},"author":1,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"ht-kb-category":[85],"ht-kb-tag":[],"class_list":["post-4011","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-root-int-chains"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Thawte Intermediate Certificates - Knowledge Base<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Thawte Intermediate Certificates - Knowledge Base\" \/>\n<meta property=\"og:description\" content=\"How to Select Intermediate and Root Certificates for Thawte SSL You may select different intermediate and root certificates (ICAs) when generating your Thawte SSL certificate on TheSSLStore.com.\u00a0 The majority of users should keep the default Intermediate option.\u00a0 If you need to select a specific intermediate and root certificate for your...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/\" \/>\n<meta property=\"og:site_name\" content=\"Knowledge Base\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/thesslstoredotcom\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-02T18:58:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@thesslstore\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Thawte Intermediate Certificates - Knowledge Base","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/","og_locale":"en_US","og_type":"article","og_title":"Thawte Intermediate Certificates - Knowledge Base","og_description":"How to Select Intermediate and Root Certificates for Thawte SSL You may select different intermediate and root certificates (ICAs) when generating your Thawte SSL certificate on TheSSLStore.com.\u00a0 The majority of users should keep the default Intermediate option.\u00a0 If you need to select a specific intermediate and root certificate for your...","og_url":"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/","og_site_name":"Knowledge Base","article_publisher":"https:\/\/www.facebook.com\/thesslstoredotcom","article_modified_time":"2026-03-02T18:58:43+00:00","og_image":[{"width":300,"height":300,"url":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@thesslstore","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/","url":"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/","name":"Thawte Intermediate Certificates - Knowledge Base","isPartOf":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#website"},"datePublished":"2024-08-29T18:44:12+00:00","dateModified":"2026-03-02T18:58:43+00:00","breadcrumb":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/root-int-chains\/thawte-intermediate-certificates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.thesslstore.com\/knowledgebase\/"},{"@type":"ListItem","position":2,"name":"Thawte Intermediate Certificates"}]},{"@type":"WebSite","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#website","url":"https:\/\/www.thesslstore.com\/knowledgebase\/","name":"Knowledge Base","description":"TheSSLstore","publisher":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.thesslstore.com\/knowledgebase\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#organization","name":"The SSL Store\u2122","url":"https:\/\/www.thesslstore.com\/knowledgebase\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#\/schema\/logo\/image\/","url":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg","contentUrl":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg","width":300,"height":300,"caption":"The SSL Store\u2122"},"image":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/thesslstoredotcom","https:\/\/x.com\/thesslstore","https:\/\/www.linkedin.com\/company\/the-ssl-store","https:\/\/www.youtube.com\/user\/thesslstore"]}]}},"_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb\/4011","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/comments?post=4011"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb\/4011\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/media?parent=4011"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb-category?post=4011"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb-tag?post=4011"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}