Short answer: a certificate thumbprint (also called a fingerprint) is a hash, usually SHA-1 or SHA-256, of the entire certificate. It identifies one exact certificate. In Windows, open the certificate and look on the Details tab for Thumbprint. In a browser, view the site certificate. With OpenSSL, run openssl x509 -in cert.pem -noout -fingerprint -sha256.
A certificate thumbprint is a hash-based identifier used to refer to a specific certificate instance succinctly. It matters because operators often need a stable way to distinguish one certificate from another without reading the whole certificate manually.
Get the CyberExperts Daily Brief: the day's top security news in 5 minutes. Free.
What is Certificate Thumbprint?
Thumbprints are useful in configuration, inventory, troubleshooting, pinning, and incident response because they provide a compact unique reference to the certificate content. They are commonly derived from a certificate hash.
What Certificate Thumbprint Commonly Supports
Common uses include certificate inventory, configuration references, troubleshooting, trust pinning, and certificate incident analysis.
Certificate Thumbprint vs. Certificate Subject Name
A thumbprint identifies a specific certificate instance. A subject name describes the identity field and may be shared or repeated across different certificates over time.
Frequently Asked Questions
Why use a thumbprint?
Because it is a concise way to refer to one exact certificate rather than a broader identity or name.
Is a thumbprint secret?
No. It is an identifier, not a private credential.
Related Cybersecurity Terms
Stay ahead on Certificate Thumbprint. Get the weekday brief on what changes next.
A concise weekday read on the developments that matter to Certificate Thumbprint and the risks worth acting on.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.
