Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top's X.509 certificate issuer:

The certificate authorities installed in my browser:

I see plenty of Thawte stuff but no Thawte SGC CA and Thawte Consulting (Pty) Ltd. stuff. Shouldn't the name of the issuer of the cert match the name of one of the certificate authorities exactly?

share|improve this question
up vote 2 down vote accepted

SGC is server gated cryptography which allows older browsers (e.g., 40-bit security) to connect to 128-bit; see for example:

But anyways the certificate for was issued by:

CN = Thawte SGC CA
O = Thawte Consulting (Pty) Ltd.
C = ZA

and Thawte SGC CA was issued by

OU = Class 3 Public Primary Certification Authority
O = VeriSign, Inc.
C = US

which your browser probably has as a trusted certificate authority.

share|improve this answer

Scroll down in the list to Verisign, Inc. You'll see Thawte SGC CA listed under Verisign. The hint to look there is that Verisign appears at the top of the hierarchy in your first screenshot.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.